EUVD-2025-202769

Malicious code in elf-stats-twinkling-wishlist-283 npm...

MAL-2025-192540 Malicious code in elf-stats-twinkling-wishlist-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a452b742f4800816cfb6c0ba402349ea379403ebbecc9c9d092416096336a The package elf-stats-twinkling-wishlist-283 was found to contain malicious code...

EUVD-2025-200755

Malicious code in elf-stats-wintry-icicle-283 npm...

Malicious code in elf-stats-wintry-icicle-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c88faa48e22eab1a433627f9ff4954b5ed66d8158a04d04826cf5fe599026e5 The package elf-stats-wintry-icicle-283 was found to contain malicious code...

MAL-2025-192197 Malicious code in elf-stats-wintry-icicle-283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c88faa48e22eab1a433627f9ff4954b5ed66d8158a04d04826cf5fe599026e5 The package elf-stats-wintry-icicle-283 was found to contain malicious code...

EUVD-2014-2042

Malware in sbrugna...

EUVD-2022-43346

Malicious code in bioql PyPI...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 283 Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a denial of service, caused by improper input validation. By sending request with a specially crafted regula...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-283)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-283 advisory. The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

QVidium Technologies Amino A140 命令注入漏洞

The QVidium Technologies Amino A140 is a HD IPTV/OTT set-top box from QVidium Technologies. A security vulnerability exists in the QVidium Technologies Amino A140 versions prior to firmware version 1.0.0-283 that originates from a command injection in the web management interface of older QVidium...

All Vulnerabilities for amitbhalani.me Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| amitbhalani.me ---|--- Open Bug Bounty...

Siemens PROFINET Devices Uncontrolled Resource Consumption (ICSA-19-283-02)

Binary data 720313.prm...

Cloud Controller, cf-deployment and cf-release authentication vulnerabilities

Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from the Cloud Foundry Foundation in the United States, which provides container scheduling, continuous delivery, and automated service deployment, among other features. cf-release is a release version of CF...

businessinsider.com XSS vulnerability

Vulnerable URL: http://www.businessinsider.com/s?q====1=date%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E?r=US=T Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 283 VIP website status:| Yes Check...

openSUSE Security Update : nodejs (openSUSE-2016-283)

This update for nodejs fixes the following issues : - CVE-2016-2216: Response splitting vulnerability using Unicode characters boo966076 - CVE-2016-2086: Request smuggling vulnerability boo966077 Node.js was updated to the 4.3.1 LTS version, containing all upstream bug fixes and improvements...

Amazon Linux: Security Advisory (ALAS-2014-283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery

e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...