Lynxtechnology records
6 published records for vendor lynxtechnology.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 2 · 33.3%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-420 Unprotected Alternate Channel1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2025-13315Weaponized | Unauthenticated log access in Twonky Serverlinux · linux kernel · CWE-420 | Critical9.3 | — | 32.5% | Nov 19, 2025 |
60This week | CVE-2025-13316Weaponized | Hard-coded encryption keys in Twonky Serverlinux · linux kernel · CWE-321 | High8.2 | — | 2.6% | Nov 19, 2025 |
38Monitor | CVE-2018-7171Proof of concept | Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directorieslynxtechnology · twonky server · CWE-22 | High7.5 | — | 27.9% | Mar 30, 2018 |
25Monitor | CVE-2018-7203Proof of concept | Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML lynxtechnology · twonky server · CWE-79 | Medium6.1 | — | 2.3% | Mar 30, 2018 |
24Monitor | CVE-2018-9182No exploit | Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.lynxtechnology · twonky server · CWE-79 | Medium6.1 | — | 1.4% | Jun 7, 2018 |
24Monitor | CVE-2018-9177No exploit | Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.lynxtechnology · twonky server · CWE-79 | Medium6.1 | — | 0.6% | Jun 7, 2018 |
- CVE-2025-1331560This week
Unauthenticated log access in Twonky Server
CriticalCVSS 9.3WeaponizedEPSS 32%linux · linux kernelNov 19, 2025
- CVE-2025-1331660This week
Hard-coded encryption keys in Twonky Server
HighCVSS 8.2WeaponizedEPSS 2%linux · linux kernelNov 19, 2025
- CVE-2018-717138Monitor
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories
HighCVSS 7.5Proof of conceptEPSS 27%lynxtechnology · twonky serverMar 30, 2018
- CVE-2018-720325Monitor
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML
MediumCVSS 6.1Proof of conceptEPSS 2%lynxtechnology · twonky serverMar 30, 2018
- CVE-2018-918224Monitor
Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.
MediumCVSS 6.1No exploitEPSS 1%lynxtechnology · twonky serverJun 7, 2018
- CVE-2018-917724Monitor
Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.
MediumCVSS 6.1No exploitEPSS 0%lynxtechnology · twonky serverJun 7, 2018