Lucene search
+L

51 matches found

KittySploit
KittySploit
•added 2026/08/19 5:37 a.m.•8 views

Linksys E1500/E2500

Module exploits remote command execution in Linksys E1500/E2500 devices. Diagnostics interface allows executing root privileged shell commands is available on dedicated web pages on the device. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys E1500/E2500""" import time from kittysploit import...

6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•19 views

Linksys Router Code Execution

The vulnerability of the hndparentalctrlunblock function in the Linksys Router E2500 microprogrammed software is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8CVSS7.6AI score0.00761EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-22120

Malicious code in bioql PyPI...

9.8CVSS5.8AI score0.01204EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/09/19 12:00 a.m.•24 views

Linksys E1500 E2500 Router Unauthorized Access

The vulnerability of the apply.cgi script of the Linksys E1500 and E2500 router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informati...

6.8CVSS6.6AI score0.02073EPSS
SaveExploits0References6Affected Software2
RedhatCVE
RedhatCVE
•added 2025/07/23 12:57 a.m.•24 views

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

9.8CVSS6AI score0.01204EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/07/21 6:15 p.m.•23 views

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

9.8CVSS5.9AI score0.01204EPSS
SaveExploits0References2
NVD
NVD
•added 2025/07/21 6:15 p.m.•25 views

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

9.8CVSS0.01204EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/21 12:00 a.m.•44 views

CVE-2025-44654

The Linksys E2500 wireless router, specifically version 3.0.04.002 , is vulnerable to a security flaw where the chroot_local_user option is enabled in the vsftpd configuration file. This misconfiguration can lead to unauthorized access to system files, privilege escalation , or the use of the com...

9.8CVSS5.9AI score0.01204EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/21 12:00 a.m.•13 views

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

5.9AI score0.01204EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/21 12:00 a.m.•42 views

CVE-2025-44654

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

0.01204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/21 12:00 a.m.•46 views

PT-2025-30319

Name of the Vulnerable Software and Affected Versions Linksys E2500 version 3.0.04.002 Description The chroot local user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot...

9.8CVSS5.9AI score0.01204EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•22 views

Linksys E2500 security vulnerabilities

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 3.0.04.002, which originates from enabling the chrootlocaluser option, and could lead to unauthorized access to system files...

9.8CVSS5.9AI score0.01204EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•10 views

CVE-2025-44654: Improper Access Control

In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks...

9.8CVSS5.9AI score0.01204EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:32 a.m.•38 views

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS8.1AI score0.00761EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/24 7:15 p.m.•56 views

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS0.00761EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/07/24 7:15 p.m.•13 views

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS8.1AI score0.00761EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/07/24 7:15 p.m.•22 views

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS8AI score0.00761EPSS
SaveExploits1References3
CVE
CVE
•added 2024/07/24 12:00 a.m.•80 views

CVE-2024-40495

The Linksys Router E2500 running firmware version 2.0.00 is vulnerable to arbitrary code execution. The root cause is incorrect code generation within the hnd_parentalctrl_unblock function. This flaw allows an authenticated attacker to execute arbitrary code on the device. As a temporary workarou...

8CVSS8AI score0.00761EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/07/24 12:00 a.m.•26 views

Linksys E2500 security vulnerabilities

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 2.0.00 that originates from allowing an authenticated attacker to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS8.1AI score0.00761EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/24 12:00 a.m.•10 views

CVE-2024-40495: Improper Control of Generation of Code

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

8CVSS8.1AI score0.00761EPSS
SaveExploits1References4
Rows per page
Query Builder