CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2008-7224 – elinks: entity_cache static array buffer overflow (off-by-one)
https://notcve.org/view.php?id=CVE-2008-7224
14 Sep 2009 — Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link. Desbordamiento de búfer en entity_cache de ELinks anterior a v0.11.4rc0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un enlace manipulado. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-193: Off-by-one Error •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2007-5034 – elinks reveals POST data to HTTPS proxy
https://notcve.org/view.php?id=CVE-2007-5034
21 Sep 2007 — ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https. ELinks anterior a la versión 0.11.3, cuando envía una petición POST para un URL https, añade el cuerpo y cabeceras de contenido de la petición POST a la petición CONNECT en texto plano, lo que ... • http://bugzilla.elinks.cz/show_bug.cgi?id=937 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 23%CPEs: 2EXPL: 2CVE-2006-5925 – Links_ ELinks 'smbclient' - Remote Command Execution
https://notcve.org/view.php?id=CVE-2006-5925
15 Nov 2006 — Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements. Los navegadores web Links 1.00pre12 y Elinks 0.9.2 con smbclient instalado permite a atacantes remotos ejecutar código arbitrario a través de metacaracteres del shell en un smb:// URI, como se ha demostrado mediante el uso de las sentencias PUT y GET. • https://www.exploit-db.com/exploits/29033 •