EUVD-2025-202769

Malicious code in elf-stats-twinkling-wishlist-283 npm...

MAL-2025-192540 Malicious code in elf-stats-twinkling-wishlist-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a452b742f4800816cfb6c0ba402349ea379403ebbecc9c9d092416096336a The package elf-stats-twinkling-wishlist-283 was found to contain malicious code...

EUVD-2025-200755

Malicious code in elf-stats-wintry-icicle-283 npm...

Malicious code in elf-stats-wintry-icicle-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c88faa48e22eab1a433627f9ff4954b5ed66d8158a04d04826cf5fe599026e5 The package elf-stats-wintry-icicle-283 was found to contain malicious code...

MAL-2025-192197 Malicious code in elf-stats-wintry-icicle-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c88faa48e22eab1a433627f9ff4954b5ed66d8158a04d04826cf5fe599026e5 The package elf-stats-wintry-icicle-283 was found to contain malicious code...

EUVD-2014-2042

Malware in sbrugna...

EUVD-2022-43346

Malicious code in bioql PyPI...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 283 Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a denial of service, caused by improper input validation. By sending request with a specially crafted regula...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-283)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-283 advisory. The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

QVidium Technologies Amino A140 命令注入漏洞

The QVidium Technologies Amino A140 is a HD IPTV/OTT set-top box from QVidium Technologies. A security vulnerability exists in the QVidium Technologies Amino A140 versions prior to firmware version 1.0.0-283 that originates from a command injection in the web management interface of older QVidium...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

All Vulnerabilities for amitbhalani.me Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| amitbhalani.me ---|--- Open Bug Bounty...

Siemens PROFINET Devices Uncontrolled Resource Consumption (ICSA-19-283-02)

Binary data 720313.prm...

Cloud Controller, cf-deployment and cf-release authentication vulnerabilities

Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from the Cloud Foundry Foundation in the United States, which provides container scheduling, continuous delivery, and automated service deployment, among other features. cf-release is a release version of CF...

businessinsider.com XSS vulnerability

Vulnerable URL: http://www.businessinsider.com/s?q====1=date%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E?r=US=T Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 283 VIP website status:| Yes Check...

openSUSE Security Update : nodejs (openSUSE-2016-283)

This update for nodejs fixes the following issues : - CVE-2016-2216: Response splitting vulnerability using Unicode characters boo966076 - CVE-2016-2086: Request smuggling vulnerability boo966077 Node.js was updated to the 4.3.1 LTS version, containing all upstream bug fixes and improvements...

Amazon Linux: Security Advisory (ALAS-2014-283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery

e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...