PT-2025-51103

The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an...

EUVD-2017-5507

Malware in sbrugna...

CVE-2018-19537

TP-Link Archer C5 devices through V2160201US allow remote command execution via shell metacharacters on the wandynhostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin ma...

CVE-2017-13992

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution...

CVE-2017-13992

The CVE-2017-13992 entry documents an Insufficient Entropy issue in LOYTEC LVIS-3ME, affected in versions prior to 6.2.0. The web interface authentication relies on weak RNG, which could enable remote code execution. Several sources (NVD, CVE listing, CNVD, PRION, etc.) confirm the issue and link...

CVE-2017-13992

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution...

LOYTEC LVIS-3ME Remote Code Execution Vulnerability

LVIS-3ME is a graphical user interface from LOYTEC. A remote code execution vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to remotely execute arbitrary code due to the application's failure to utilize a sufficiently random number to generat...

Security Advisory- Web Interface Authentication Bypass Vulnerability in Huawei Tecal RH2285 V2 Server

Tecal RH2285 V2 is a next-generation 2 U 2-socket rack server. Featuring two Intel® Xeon® E5-2400 series processors, the RH2285 V2 provides large storage capacity, flexible scalability, and superb cost-effectiveness, which is an ideal hardware platform for big data and distributed storage...

Multiple Xerox WorkCentre products unauthorized access

It's possible to bypass authentication for Web interface access...

Linksys multiple routers buffer overflow

Buffer overflow during Web interface authentication...

Переполнение буфера в AVTronics InetServer (buffer overflow)

Переполнение буфера при авторизации в Web-интерфейсе...