Security Bulletin: IBM Test Accelerator for Z is affected by vulnerabilities in grpc-js package.

Summary IBM Test Accelerator for Z uses grpc-js package which is vulnerable to CVE-2026-101915, CVE-2026-101916. This security bulletin provides details about the vulnerability and the corresponding remediation. Vulnerability Details CVEID:CVE-2026-101915 DESCRIPTION: @grpc/grpc-js implements the...

ShiroKit

shirokit An Apache Shiro exploitation toolkit for authorize...

Exploit for Use of Hard-coded Cryptographic Key in Apache Aurora

Apache Shiro 1.2.4 RememberMe Deserialization CVE-2016-4437...

Malicious code in elf-stats-cosy-sled-550 (npm)

Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2024-2442

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...

MAL-2025-192328 Malicious code in elf-stats-cosy-sled-550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code...

EUVD-2025-201488

Malicious code in elf-stats-cosy-sled-550 npm...

Malicious code in elf-stats-cosy-sled-550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code...

EUVD-2020-12615

Malware in sbrugna...

EUVD-2020-12628

Malware in sbrugna...

EUVD-2023-58126

Malicious code in bioql PyPI...

CVE-2020-1855

Huawei HEGE-570 version 1.0.1.22SP3; and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit...

CVE-2020-1789

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21SP3 have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the...

CVE-2020-1843

Huawei HEGE-560 version 1.0.1.20SP2, OSCA-550 version 1.0.0.71SP1, OSCA-550A version 1.0.0.71SP1, OSCA-550AX version 1.0.0.71SP2, and OSCA-550X version 1.0.0.71SP2 have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physica...

CVE-2020-1802

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product...

CVE-2025-40556: Improper Input Validation

A vulnerability has been identified in BACnet ATEC 550-440 All versions, BACnet ATEC 550-441 All versions, BACnet ATEC 550-445 All versions, BACnet ATEC 550-446 All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the sa...

Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Update to 550.144.03 bsc1235461, bsc1235871 fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

CVE-2024-8497

Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials...

Franklin Fueling TS-550 EVO Automatic Tank Gauge has security vulnerabilities

Franklin Fueling TS-550 EVO Automatic Tank Gauge is an automated industrial tank gauge from Franklin Fueling USA. A security vulnerability previously existed in the Franklin Fueling TS-550 EVO Automatic Tank Gauge version 2.26.4.8967, which stemmed from administrator credentials being stored in a...

CVE-2024-8497: Absolute Path Traversal

Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials...