Unity Linux 20.1070e Security Update: cups (UTSA-2025-993328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993328 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the...

Yealink T21P_E2 Web Interface Code Execution

The vulnerability of the web interface of Yealink T21PE2 microprogramming software for IP phones is related to the lack of measures taken at the management level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST...

CVE-2024-58337

CVE-2024-58337 affects the Akuvox Smart Intercom S539. The vulnerability is an improper access control in the ServicesHTTPAPI that lets users with 'User' privileges modify API access settings and configurations, enabling privilege escalation to administrative functionalities. The CVSS details ind...

CVE-2025-15258

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

CVE-2025-15258

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

CVE-2025-15258 Edimax BR-6208AC Web-based Configuration formALGSetup redirect

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

CVE-2025-15258

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

CVE-2025-15257

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The...

CVE-2025-15257

A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The...

CVE-2025-15257

Edimax BR-6208AC (versions 1.02–1.03) Web-based Configuration Interface has a command-injection flaw in the formRoute function located at /gogorm/formRoute. Manipulating the strIp, strMask, or strGateway parameters enables remote code execution. The exploit is publicly available. Edimax states th...

CVE-2025-15256 Edimax BR-6208AC Web-based Configuration formStaDrvSetup command injection

A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection. Remote exploitation of the attack i...

Edimax BR-6208AC 安全漏洞

The Edimax BR-6208AC is a wireless router from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax BR-6208AC version 1.02 and 1.03, which originates from an incorrect operation of the rootAPmac parameter of the file /goform/formStaDrvSetup in the componen...

Edimax BR-6208AC 命令注入漏洞

The Edimax BR-6208AC is a wireless router from Taiwan, China-based Xunzhou Edimax Corporation. A command injection vulnerability exists in Edimax BR-6208AC version 1.02 and 1.03, which originates from incorrect manipulation of the file /gogorm/formRoute parameter strIp/strMask/strGateway in the...

PT-2025-54198

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC versions 1.02 through 1.03 Description A security flaw exists in the Web-based Configuration Interface component of Edimax BR-6208AC. The formRoute function within the /gogorm/formRoute file is susceptible to command injection...

FTP server Web Interface RCE

The vulnerability of the FTP server interface of Wing FTP Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code remotely...

Nagios Log Server XSS

The vulnerability of the web interface of the Nagios Log Server monitoring and analysis software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-67013

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery CSRF protection mechanisms no tokens, no Origin/Referer validation on critical configuration endpoints...

CVE-2025-67013

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery CSRF protection mechanisms no tokens, no Origin/Referer validation on critical configuration endpoints...

CVE-2025-67013

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 is vulnerable to Cross-Site Request Forgery (CSRF) . The root cause is a lack of protection mechanisms, such as CSRF tokens or Origin/Referer validation , on critical configuration endpoints. T...

EUVD-2025-205447

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery CSRF protection mechanisms no tokens, no Origin/Referer validation on critical configuration endpoints...