Malicious Package in axois

All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This package...

Malicious Package

axios-http is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9595 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: OSV:GHSA-42XW-2XVC-QX8M...

Denial of Service in axios

Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

GHSA-42XW-2XVC-QX8M Denial of Service in axios

Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

Design/Logic Flaw

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

DEBIAN-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

UBUNTU-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios versions prior to 0.18.1 are vulnerable to a Denial of Service due to continuing to accept content after maxContentLength is exceeded, potentially causing server/application resource exhaustion. Public advisories reference DoS in Axios up to 0.18.0 and recommend upgrading to 0.18.1 or later...

Denial of Service

Overview Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

Design/Logic Flaw

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

CVE-2019-7693 affects Axios Italia Axios RE 1.7.0/7.0.0 devices. The issue is an XSS vulnerability triggered via the RELogOff.aspx Error_Parameters parameter, with potential impact on the family.axioscloud.it cloud service; offline operation is supported by the vendor via “Sissi in Rete (con serv...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...