AppWeb - Authentication Bypass

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. id: CVE-2018-8715 info: name: AppWeb - Authentication...

PoC-CVE-2025-12097

CVE-2025-12097 설명 NI가 수정한 Appweb 서버에는 디렉터리 트래버설 취약점이 존재하며, 공격자가 서버에서 임의의 파일을 읽을 수 있습니다. URI 경로 /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini 는 다음과 같이 변환됩니다: pathInfo cchar "/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/windows/win.ini” 0x000000010076f808 이는 유효한 URI이며 appweb은 이 요청을 차단하지 않습니다. 그런 다음 ...

CVE-2021-33254

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function...

Exploit for CVE-2025-12097

CVE-2025-12097 Description NI modification of Appweb serv...

EUVD-2004-2307

Malware in sbrugna...

EUVD-2007-3001

Malware in sbrugna...

EUVD-2007-3000

Malware in sbrugna...

EUVD-2021-19965

Malware in sbrugna...

EUVD-2004-2205

Malware in sbrugna...

EUVD-2014-9515

Malware in sbrugna...

EUVD-2020-22067

Malware in sbrugna...

EUVD-2018-7382

Malware in sbrugna...

EUVD-2004-2308

Malware in sbrugna...

EUVD-2004-2309

Malware in sbrugna...

EUVD-2018-7381

Malware in sbrugna...

EUVD-2020-7676

Malware in sbrugna...

CVE-2020-15689

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...

CVE-2004-2317

Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access...

Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) - Credentials Disclosure

Electrolink FM/DAB/TV Transmitter login.htm/mail.htm Credentials Disclosure Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100...

Electrolink FM/DAB/TV Transmitter (Login Cookie) - Authentication Bypass

Electrolink FM/DAB/TV Transmitter Login Cookie Authentication Bypass Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100W, 500W...