301 matches found
EUVD-2021-18602
Malware in sbrugna...
EUVD-2008-1572
Malware in sbrugna...
EUVD-2019-15888
Malware in sbrugna...
EUVD-2018-19545
Malware in sbrugna...
EUVD-2019-8496
Malware in sbrugna...
EUVD-2023-29251
Malicious code in bioql PyPI...
EUVD-2025-22544
Malicious code in bioql PyPI...
EUVD-2025-27460
Malicious code in bioql PyPI...
EUVD-2025-16063
Malicious code in bioql PyPI...
The vulnerability in the embedded web server of Lexmark’s microprogramming software allows a perpetrator to execute arbitrary code.
The vulnerability of the embedded web-server microprogramming software of Lexmark printers is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-9269
A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...
CVE-2025-9269
A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...
CVE-2025-9269 Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...
CVE-2025-9269
Lexmark devices with the embedded web server are affected by CVE-2025-9269 (SSRF). The vulnerability allows an attacker to coerce the device into issuing arbitrary HTTP requests to a third-party server, potentially enabling internal network access or data disclosure. CVSSv4 base score 6.9 (networ...
CVE-2025-9269: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...
PT-2025-36901
Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A Server-Side Request Forgery SSRF vulnerability exists in the embedded web server of Lexmark devices. An attacker can exploit this issue to make the device send an arbitrary HTTP...
The vulnerability of the embedded web server and microprogramming software in TOTOLINK EX1200T routers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the built-in web server boa /boafrm/formIpQoS of TOTOLINK EX1200T router’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...
CVE-2013-10063: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions = 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive...
Netgear SPH200D 安全漏洞
The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...
EmbedThis GoAhead 跨站脚本漏洞
EmbedThis GoAhead is an embedded web server software from EmbedThis, Inc. A cross-site scripting vulnerability exists in EmbedThis GoAhead version 2.5, which stems from HTML injection of the name parameter...