CVE-2025-68271

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...

CVE-2024-39016

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

EUVD-2018-5455

Malware in sbrugna...

EUVD-2010-0379

Malware in sbrugna...

EUVD-2012-1821

Malware in sbrugna...

EUVD-2010-0380

Malware in sbrugna...

EUVD-2007-2788

Malware in sbrugna...

PYSEC-2025-149

A remote code execution RCE vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file...

CVE-2025-28384

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal...

CVE-2024-39016

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28326 · Che3Vinci · C3/Utils-1

Name of the Vulnerable Software and Affected Versions: che3vinci c3/utils-1 version 1.0.131 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the assign function...

c3 utils security vulnerability

c3 utils is an open source utility library by che3vinci. A security vulnerability exists in c3 utils version 1.0.131, which originates from the inclusion of prototype contamination via the function assign, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injectin...

CVE-2024-39016

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Malicious code in c3-pricecaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b03dfb89422ee188083a005d46e87873b3548d2f360a07d2380736049483de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

c3.kz Cross Site Scripting vulnerability OBB-3618794

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in dash_cam_viewer_serial_107_c3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04e5ee2fdf2ae08e390b842fe8c24fe2bc3f0152496de84694bc95ccbcde01b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

c3-chemnitz.de Cross Site Scripting vulnerability OBB-3193893

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

c3-chemnitz.de Cross Site Scripting vulnerability OBB-3157864

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE SLES15 Security Update : json-c (SUSE-SU-2022:0184-2)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0184-2 advisory. - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. bsc1171479 Tenable has extracted the preceding description block directly from the SU...

c3.hu Cross Site Scripting vulnerability OBB-2350476

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...