CVE-2015-1001

Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.

• CWE-119

• https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02Third Party Advisory, US Government Resource

Published

Oct 25, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10004Token validation methods are susceptible to a timing side-ch…7.5
• CVE-2015-10005A vulnerability was found in markdown-it up to 2.x. It has b…7.5
• CVE-2015-10006A vulnerability, which was classified as problematic, has be…6.1
• CVE-2015-10007** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…6.1
• CVE-2015-10008** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2015-10009A vulnerability was found in nterchange up to 4.1.0. It has …9.8
• CVE-2015-10010A vulnerability was found in OpenDNS OpenResolve. It has bee…6.1
• CVE-2015-10011A vulnerability classified as problematic has been found in …9.8
• CVE-2015-10012** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…7.5
• CVE-2015-10013A vulnerability was found in WebDevStudios taxonomy-switcher…6.1
• CVE-2015-10014A vulnerability classified as critical has been found in are…9.8
• CVE-2015-10015A vulnerability, which was classified as critical, has been …9.8