EUVD-2021-27073

Malware in sbrugna...

CVE-2025-10325

A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub401340/sub401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

CVE-2021-3824

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL...

CVE-2022-2485

Any attempt good or bad to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets...

PT-2024-33020 · Audiocodes · Audiocodes Mp-202B

Name of the Vulnerable Software and Affected Versions: Audiocodes MP-202b version 4.4.3 Description: The issue allows a remote attacker to escalate privileges via the login page of the web interface. This is due to a cross site scripting vulnerability. Recommendations: For version 4.4.3, consider...

PT-2022-16924 · Automationdirect · Automationdirect Stride Field I/O

Name of the Vulnerable Software and Affected Versions: AutomationDirect Stride Field I/O affected versions not specified Description: The issue allows any attempt to log into the device with a web browser to potentially receive the device's password in the communication packets. Recommendations: ...

ProLink PRC2402M 授权问题漏洞

ProLink PRC2402M is a router from ProLink Singapore. An information disclosure vulnerability exists in the setsysinit function in the login.cgi binary file of ProLink PRC2402M 1.0.18 and prior versions. An attacker can exploit this vulnerability to reset the password in the administrator interfac...

Zhejiang Dahua Network Hard Disk Recorder DH-NVR2104HS-S1 has logical design loopholes

Zhejiang Dahua Network DVR DH-NVR2104HS-S1 is a network DVR that integrates 4-channel 10/100Mbps switch ports and supports 1080P HD real-time real-time preview and so on. A logical design vulnerability exists in the Zhejiang Dahua Network DVR DH-NVR2104HS-S1. An attacker can use the vulnerability...

SQL Injection Vulnerability in Labthink DSS-MAX Decision Support System

Labthink Innovation is a leading digital workshop solution provider in China, with a high market share in aerospace DNC/MDC/MES, and is also the main integrator of CIMCO in China. Labthink DSS-Max is a DNC/MDC production decision support system, which is mainly used for machine tool data collecti...