5008 matches found
MAL-2022-6829 Malicious code in usaa-axios-factory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in usaa-axios-factory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in axios-replace (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a686c9db8b278dabb3e76765ae41fd7caae4c05302f3ee663c7ff6781c5d4f1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1210 Malicious code in axios-replace (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a686c9db8b278dabb3e76765ae41fd7caae4c05302f3ee663c7ff6781c5d4f1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: IBM Sterling Control Center is vulnerable to server-side request forgery due to Node.js axios module (CVE-2020-28168)
Summary Node.js axios module is used by IBM Sterling Control Center. A server-side request forgery vulnerability in Node.js axios module has been addressed. Vulnerability Details CVEID: CVE-2020-28168 DESCRIPTION: Node.js axios module is vulnerable to server-side request forgery, caused by improp...
Exploit for Uncontrolled Resource Consumption in Axios
Axios Regular Expression Denial Of Service Attack This repo h...
CVE-2019-25069
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...
CVE-2019-25069
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...
CVE-2019-25068
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...
Design/Logic Flaw
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...
Design/Logic Flaw
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...
CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...
CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...
CVE-2019-25069
Axios RE (Axios Italia) 1.7.0/7.0.0 contains a vulnerability in the Error Message Handler that can enable remote information disclosure in ASP.NET. The issue stems from how the Error Message Handler processes errors, with CVSS‑3.1 base score 7.5 (HIGH) and network attack vector, no privileges req...
CVE-2019-25068 Axios Italia Axios RE Connection REDefault.aspx privileges management
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...
CVE-2019-25068
CVE-2019-25068 affects Axios Italia Axios RE 1.7.0/7.0.0. The vulnerability originates in the file REDefault.aspx of the Connection Handler, where manipulating the argument DBIDX can lead to privilege escalation. The attack can be initiated remotely, indicating potential remote exploitation. Conn...
CVE-2019-25068 Axios Italia Axios RE Connection REDefault.aspx privileges management
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...
Axios Italia Axios RE 安全漏洞
Axios Italia Axios RE is a suite of electronic enrollment software for campus administration. Axios Italia Axios RE 1.7.0/7.0.0 contains a security vulnerability that originates from a problem with the file REDefault.aspx in the component connection handler. An attacker can exploit the...
Axios Italia Axios RE 信息泄露漏洞
Axios Italia Axios RE is a suite of electronic enrollment software for campus management. A security vulnerability exists in Axios Italia Axios RE 1.7.0/7.0.0 that originates from a problem with the component error message handler. An attacker can exploit the vulnerability to obtain sensitive...
kipor.vn Cross Site Scripting vulnerability OBB-2515419
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...