Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:22:19 +0000 bdu:2025-11351 https://cve.radiocsirt.org/vuln/bdu:2025-11351 bdu:2025-11351 https://cve.radiocsirt.org/vuln/bdu:2025-11351 EUVD-2026-280674 https://cve.radiocsirt.org/vuln/euvd-2026-280674 EUVD-2026-280674 https://cve.radiocsirt.org/vuln/euvd-2026-280674 fkie_cve-2013-10062 https://cve.radiocsirt.org/vuln/fkie_cve-2013-10062 <p>A directory traversal vulnerability exists in Linksys router&#39;s web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.</p> <p>A directory traversal vulnerability exists in Linksys router&#39;s web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-10062 GHSA-5cpf-pp9h-vpgm https://cve.radiocsirt.org/vuln/ghsa-5cpf-pp9h-vpgm <p>A directory traversal vulnerability exists in Linksys router&#39;s web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.</p> <p>A directory traversal vulnerability exists in Linksys router&#39;s web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.</p> https://cve.radiocsirt.org/vuln/ghsa-5cpf-pp9h-vpgm