CVE-2025-13826: Improper Input Validation

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is...

EUVD-2025-35007

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2025-11943

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2025-11943

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2025-11943

CVE-2025-11943 concerns 70mai X200 devices up to 20251010. Multiple sources (NVD, Red Hat, CVE list, CNNVD) describe an issue in the HTTP Web Server component where an attack can lead to use of default credentials. The vulnerability is remotely exploitable and affects the HTTP Web Server function...

CVE-2025-11943: Use of Default Credentials

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

PT-2025-42722

Name of the Vulnerable Software and Affected Versions 70mai X200 versions up to 20251010 Description A vulnerability exists in the HTTP Web Server component of 70mai X200 devices. This issue allows for the use of default credentials, and the attack can be initiated remotely. The exploit has been...

EUVD-2000-0768

Malware in sbrugna...

EUVD-2002-0998

Malware in sbrugna...

EUVD-2003-1533

Malware in sbrugna...

EUVD-2021-34029

Malicious code in bioql PyPI...

CVE-2021-4161

CVE-2021-4161 affects MOXA MGate MB3180/MB3280/MB3480 Series Protocol Gateways. Vulnerable firmware versions include MB3180 (≤2.2), MB3280 (≤4.1), and MB3480 (≤3.2). The flaw allows cleartext transmission of sensitive information, enabling an attacker to sniff traffic and decrypt login credential...

CVE-2021-4161: Cleartext Transmission of Sensitive Information

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server...

PT-2021-7485

Name of the Vulnerable Software and Affected Versions Moxa MGate versions MB3180, MB3280, and MB3480 Description The issue is related to the transmission of data in plain text, which could allow an attacker to intercept traffic and decrypt login credentials, potentially granting admin rights...

CVE-2021-35395

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affect...

CVE-2018-15379: Incorrect Permission Assignment for Critical Resource

A vulnerability in which the HTTP web server for Cisco Prime Infrastructure PI has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the privilege level of the user prime. This...

PT-2018-2097

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure affected versions not specified Description A vulnerability exists due to incorrect permission settings for important system directories in the HTTP web server for Cisco Prime Infrastructure. This could allow an...

Apache Roller 5.0.3 - XML External Entity Injection Exploit

Exploit for linux platform in category web applications Exploit Title: Apache Roller 5.0.3 - XML External Entity Injection File Disclosure Google Dork: intext:"apache roller weblogger version vulnerableversionnumber" Exploit Author: Marko Jokic Contact: http://twitter.com/MarkoJokic Vendor...

Apache Roller 5.0.3 XML Injection / File Disclosure

Exploit Title: Apache Roller 5.0.3 - XML External Entity Injection File Disclosure Google Dork: intext:"apache roller weblogger version vulnerableversionnumber" Date: 2018-09-05 Exploit Author: Marko Jokic Contact: http://twitter.com/MarkoJokic Vendor Homepage: http://roller.apache.org/ Software...

Debian Security Advisory DSA 3738-1 (tomcat7 - security update)

Multiple security vulnerabilities were discovered in the Tomcat servlet and JSP engine, as well as in its Debian-specific maintainer scripts. Those flaws allowed for privilege escalation, information disclosure, and remote code execution. As part of this update, several regressions stemming from...