98 matches found
EUVD-2013-4707
Malware in sbrugna...
EUVD-2017-18316
Malware in sbrugna...
EUVD-2017-18323
Malware in sbrugna...
EUVD-2017-18325
Malware in sbrugna...
EUVD-2017-18318
Malware in sbrugna...
EUVD-2013-4710
Malware in sbrugna...
EUVD-2017-18324
Malware in sbrugna...
EUVD-2017-18319
Malware in sbrugna...
EUVD-2017-18326
Malware in sbrugna...
EUVD-2017-18317
Malware in sbrugna...
EUVD-2017-18322
Malware in sbrugna...
EUVD-2017-18320
Malware in sbrugna...
EUVD-2017-18327
Malware in sbrugna...
EUVD-2017-18321
Malware in sbrugna...
VulnCheck KEV: CVE-2013-4863
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a...
CVE-2013-4861
Directory traversal vulnerability in cgi-bin/cmh/getfile.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. dot dot in the filename parameter...
CVE-2013-4863
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...
CVE-2013-4864
MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, related to a Server-Side Request Forgery SSRF issue...
CVE-2013-4862
MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to 1 update the firmware via the squashfs parameter to upgradestep2.sh or 2 obtain hashed passwords via the cgi-bin/cmh/backup.sh page...
CVE-2013-4865
Cross-site request forgery CSRF vulnerability in upgradestep2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter...