MAL-2025-174009 Malicious code in diva-turai-inusuaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e69e058d9e727915d5cae62cc3ffe87ae1441bc77b394ca6044041d5b70d644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173974 Malicious code in diva-tugafai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649af86e80276ebd2d5ddadbc4f5eb352d1fe2a3aa0cc8f8bffec594e4a1fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173908 Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173910 Malicious code in diva-banib-imuabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8cf9423b5c4b312e0c19a6905b6b71a94462a150f1f567b1c316bdf4778631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173958 Malicious code in diva-tgbai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d722be7e0d7f342ec1b1167e7cac272eda1b4ee6ca492a8e077b54e7a0fc9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173949 Malicious code in diva-banubo-imubaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392222b6ccb8c87611396f9937d8be67bcdae57a12f045c041cca5240e945060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173898 Malicious code in diva-banib-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78a4b4d47e2dea035868c5c1ae44606bf6ebf3e17f0c5f3a0df53b7966c204f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-7792

Malware in sbrugna...

EUVD-1999-1514

Malware in sbrugna...

EUVD-2014-9271

Malware in sbrugna...

CVE-2024-13151

Authorization Bypass Through User-Controlled SQL Primary Key, CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Logo Software Diva allows SQL Injection, CAPEC - 7 - Blind SQL Injection.This issue affects Diva: through 4.56.00.00...

PT-2025-38315

Name of the Vulnerable Software and Affected Versions Logo Software Retail Sales Management versions through 20250918 Logo Software Diva versions through 4.56.00.00 Description A SQL injection issue exists in Logo Software Retail Sales Management and Diva due to improper neutralization of special...

diva-design.hr Improper Access Control vulnerability OBB-3832330

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

Path traversal

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

CVE-2020-15809 affects SpinetiX devices via spxmanage, enabling SSRF and Path Traversal to access unintended resources. Affected are: HMP350, HMP300 and DiVA up to 4.5.2-1.0.36229; HMP400 and HMP400W up to 4.5.2-1.0.2-1eb2ffbd; and DSOS up to 4.5.2-1.0.2-1eb2ffbd. Root cause is SSRF/Path Traversa...

SpinetiX SpinetiX 路径遍历漏洞

SpinetiX is an application platform from SpinetiX Germany. A solution suite is available. A security vulnerability exists in SpinetiX devices that originates from requests to access unintended resources due to SSRF and path traversal. The following products and versions are affected: HMP350,...

diva-center.hu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1168661 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...