CVE-2018-18437: Improper Neutralization of Input During Web Page Generation

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

Malicious Package

Overview All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Thi...

Denial Of Service (DoS)

axios is vulnerable to Denial Of Service DoS. The vulnerability exists as content can continue to be sent through the stream even after the request has exceeded the maxContentLength, potentially causing a denial of service attack...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9588 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: SNYK:JS-AXIOS-174505...

Denial of Service (DoS)

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Denial of Service DoS due to content continuing to be accepted from requests after maxContentLength is exceeded. PoC require'axios'.get...