EUVD-2018-3283

Malware in sbrugna...

EUVD-2017-11026

Malware in sbrugna...

EUVD-2020-16061

Malware in sbrugna...

EUVD-2020-2731

Malware in sbrugna...

EUVD-2020-26965

Malware in sbrugna...

EUVD-2017-11029

Malware in sbrugna...

EUVD-2016-2579

Malware in sbrugna...

EUVD-2006-5010

Malware in sbrugna...

EUVD-2017-11030

Malware in sbrugna...

EUVD-2020-16068

Malware in sbrugna...

EUVD-2020-28501

Malware in sbrugna...

EUVD-2013-4458

Malware in sbrugna...

EUVD-2000-0033

Malware in sbrugna...

EUVD-2017-3123

Malware in sbrugna...

EUVD-2019-4098

Malware in sbrugna...

CVE-2025-3718: Improper Limitation of a Pathname to a Restricted Directory

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...

CVE-2025-3719: Incorrect Authorization

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...

CVE-2025-40889: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder...

CVE-2025-40888: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

CVE-2025-40887: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...