13 matches found
Exploit for CVE-2026-45185
CVE-2026-45185 Nuclei Template Validation Lab This repository...
EUVD-2025-200800
Malicious code in elf-stats-snuggly-workshop-421 npm...
Malicious code in elf-stats-snuggly-workshop-421 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60b1ac70524bb061b228ee68f63ec244a3dbe68de87b68fde06d7784e5ee61b The package elf-stats-snuggly-workshop-421 was found to contain malicious code...
MAL-2025-192152 Malicious code in elf-stats-snuggly-workshop-421 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60b1ac70524bb061b228ee68f63ec244a3dbe68de87b68fde06d7784e5ee61b The package elf-stats-snuggly-workshop-421 was found to contain malicious code...
Debian: Security Advisory (DLA-421-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Xenstore: Guests can create arbitrary number of nodes via transactions (XSA-421)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a vulnerability in its node creation feature. In case a node has been created in a transaction and it is later deleted in the same transaction, the transaction will be terminated with an...
CVE-2020-11767
Istio up to 1.5.1 and Envoy up to 1.14.1 are affected by a data-leak vulnerability where a TCP connection negotiated with SNI over HTTPS to *.example.com can cause a domain-specific request (e.g., abc.example.com) to be sent via a connection reused by a forward proxy to the *.example.com host. Th...
Design/Logic Flaw
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20903
CVE-2018-20903 concerns cPanel prior to 71.9980.37, where the WHM Backup Configuration interface is vulnerable to self-XSS (SEC-421). The root cause is user input not properly validated client-side, allowing injected script when viewed in the backup config context. Impact is self-XSS in the inter...
CVE-2017-9178
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:421:11...
Amazon Linux: Security Advisory (ALAS-2014-421)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The XFree86-devel-4.2.1-21 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Amazon Linux AMI : nginx (ALAS-2014-421)
A virtual host confusion issue was found in nginx, allowing HTTPS connections for one origin to be redirected to the virtual host of a different origin. This leads to a variety of issues, such as cookie theft and session hijacking. It could be triggered from a cross-site scripting flaw, tricking ...