104 matches found
PT-2025-49254
A reflected Cross Site Scripting XSS vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...
PT-2025-49253
Name of the Vulnerable Software and Affected Versions Fanvil x210 version 2.12.20 Description A buffer overflow exists on Fanvil x210 devices. An attacker can send a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint, potentially leading to a denial of service or...
CVE-2025-64054
The Fanvil x210 IP telephony device, specifically version 2.12.20 , is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this by sending a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. Successful exploitation could le...
CVE-2025-64053
The Fanvil x210 IP telephony device, running version 2.12.20 , is vulnerable to a buffer overflow vulnerability. An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. Successful exploitation could lead to a den...
CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...
EPSON WebConfig Authentication Bypass
The vulnerability of the software for controlling EPSON WebConfig and EPSON Web Control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to device settings...
EPSON WebConfig / Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts
Overview EPSON WebConfig / Epson Web Control for SEIKO EPSON Projector Products provided by SEIKO EPSON CORPORATION contain the following vulnerability. Improper restriction of excessive authentication attempts CWE-307 - CVE-2025-64310 Vladislav Khegay and Aigerim Alibek of Astana IT University...
CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...
CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...
CVE-2025-64310
Affected products: EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products. Issue: unlimited authentication attempts allow brute force to identify an administrative password (CWE-307). Impact: high risk to confidentiality, integrity, and availability as per CVSS vectors in the co...
CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...
CVE-2025-64310: Improper Restriction of Excessive Authentication Attempts
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...
PT-2025-47659
Name of the Vulnerable Software and Affected Versions EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products affected versions not specified Description The software does not limit the number of authentication attempts, potentially allowing an attacker to identify an...
EUVD-1999-0825
Malware in sbrugna...
EUVD-2000-1008
Malware in sbrugna...
EUVD-2001-0575
Malware in sbrugna...
EUVD-2023-56753
Malicious code in bioql PyPI...
EUVD-2023-57643
Malicious code in bioql PyPI...