152 matches found
PT-2026-99133
Name of the Vulnerable Software and Affected Versions Flame versions prior to 2.4.1 Description An insufficient session expiration issue exists in the login endpoint. Attackers with former administrator access can obtain tokens with arbitrary lifespans by providing unvalidated duration parameters...
PT-2026-99130
Name of the Vulnerable Software and Affected Versions Flame versions prior to 2.4.1 Description An information exposure issue exists in the unauthenticated 'GET /api/config' endpoint, which returns the complete configuration object without redacting sensitive fields. This allows an attacker to...
CVE-2026-100418: Exposure of Sensitive Information to an Unauthorized Actor
Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object without field redaction. Attackers can retrieve the stored weather API key and internal operational settings by sending a single...
PT-2026-99132
Name of the Vulnerable Software and Affected Versions Flame versions prior to 2.4.1 Description An improper restriction of excessive authentication attempts exists in the 'POST /api/auth' login endpoint. This allows unauthenticated attackers to perform brute-force attacks against the admin passwo...
Keep Your Tech FLAME Alive: Trailblazer Suzanne Wheeler
In this Akamai FLAME Trailblazer blog post, Suzanne Wheeler describes her journey into cybersecurity and gives advice to women who are finding their own path...
Malicious Package
Overview jewel-yjsw3-7iemy-flame-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
CVE-2022-50935
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935
CVE-2022-50935 affects Flame II HSPA USB Modem. The Windows service configuration contains an unquoted service path at C:\Program Files (x86)\Internet Telcel\ApplicationController.exe, enabling local attackers to execute arbitrary code with elevated privileges. CVSS metrics in the entry indicate ...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935: Unquoted Search Path or Element
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
Flame II HSPA USB Modem 代码问题漏洞
The Flame II HSPA USB Modem is a wireless network card from Flame. The Flame II HSPA USB Modem suffers from a code issue vulnerability that stems from the presence of unquoted service paths in the Windows service configuration, which could lead to an attacker executing arbitrary code with elevate...
EUVD-2020-1764
Malware in sbrugna...
Malicious code in vscode-js-profile-flame (npm)
The package vscode-js-profile-flame was found to contain malicious code...
Malicious code in flame-awklr-zlaf6-yarn-project (npm)
The package flame-awklr-zlaf6-yarn-project was found to contain malicious code...
Malicious code in flame-fb9wz-y9wkd-crystal-project (npm)
The package flame-fb9wz-y9wkd-crystal-project was found to contain malicious code...
Malicious code in flame-mo59h-wujz3-glow-project (npm)
The package flame-mo59h-wujz3-glow-project was found to contain malicious code...
Malicious code in flame-treasure-nsk229-project (npm)
The package flame-treasure-nsk229-project was found to contain malicious code...