23 matches found
EUVD-2013-3004
Malware in sbrugna...
EUVD-2013-3003
Malware in sbrugna...
EUVD-2013-3002
Malware in sbrugna...
EUVD-2013-4513
Malware in sbrugna...
CVE-2013-4658
Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share...
CVE-2013-4658
Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share...
CVE-2013-4658
Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share...
CVE-2013-4658: Improper Limitation of a Pathname to a Restricted Directory
Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share...
PT-2019-6961
Name of the Vulnerable Software and Affected Versions Linksys EA6500 affected versions not specified Description The issue allows symbolic links to be created to locations outside of the Samba share due to SMB Symlink Traversal. This affects the Linksys EA6500 device. Recommendations At the momen...
CVE-2013-3064
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...
CVE-2013-3065
Cross-site scripting XSS vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section...
CVE-2013-3066
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information clients and router configuration via a request to /JNAP/...
Design/Logic Flaw
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information clients and router configuration via a request to /JNAP/...
Cross site scripting
Cross-site scripting XSS vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section...
Open redirect
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...
CVE-2013-3066
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information clients and router configuration via a request to /JNAP/...
CVE-2013-3064
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...
PT-2014-2647
Name of the Vulnerable Software and Affected Versions Linksys EA6500 version 1.1.28.147876 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter. This is related to an open redirect vulnerability in th...
CVE-2013-3064: Undefined Security Weakness
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...
CVE-2013-3065: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section...