EUVD-2025-22120

Malicious code in bioql PyPI...

The vulnerability in the `apply.cgi` script of the Linksys E1500 and E2500 router microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the apply.cgi script of the Linksys E1500 and E2500 router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informati...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

CVE-2025-44654

CVE-2025-44654 affects Linksys E2500 ( firmware 3.0.04.002). The vulnerability stems from the vsftpd configuration’s chroot_local_user option being enabled, which could enable unauthorized access to system files, privilege escalation, or use of the compromised router as a pivot inside the network...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

Linksys E2500 安全漏洞

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 3.0.04.002, which originates from enabling the chrootlocaluser option, and could lead to unauthorized access to system files...

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

PT-2025-30319

Name of the Vulnerable Software and Affected Versions Linksys E2500 version 3.0.04.002 Description The chroot local user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

PT-2024-28878

Name of the Vulnerable Software and Affected Versions Linksys Router E2500 version 2.0.00 Description A vulnerability was discovered that allows authenticated attackers to execute arbitrary code via the hnd parentalctrl unblock function. Recommendations For Linksys Router E2500 version 2.0.00,...

Linksys E2500 安全漏洞

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 2.0.00 that originates from allowing an authenticated attacker to execute arbitrary code via the hndparentalctrlunblock function...

CVE-2024-40495

The CVE CVE-2024-40495 affects the Linksys Router E2500 (firmware 2.0.00). Affected component: hnd_parentalctrl_unblock function. Root cause allows an authenticated attacker to execute arbitrary code on the device. Impact per sources: high (remote code execution with authentication; consequences ...

The vulnerability of the set_host_domain_name function in Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems allows a hacker to execute arbitrary commands.

The vulnerability of the sethostdomainname function libshared.so in Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...