128 matches found
EUVD-2026-87368
Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...
EUVD-2026-87367
Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to brute-force the admin password. Attackers can submit unlimited password guesses without rate limiting, attempt...
EUVD-2026-87365
Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object without field redaction. Attackers can retrieve the stored weather API key and internal operational settings by sending a single...
CVE-2026-100502
Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...
CVE-2022-50935
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935
CVE-2022-50935 affects Flame II HSPA USB Modem. The Windows service configuration contains an unquoted service path at C:\Program Files (x86)\Internet Telcel\ApplicationController.exe, enabling local attackers to execute arbitrary code with elevated privileges. CVSS metrics in the entry indicate ...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935: Unquoted Search Path or Element
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
Flame II HSPA USB Modem 代码问题漏洞
The Flame II HSPA USB Modem is a wireless network card from Flame. The Flame II HSPA USB Modem suffers from a code issue vulnerability that stems from the presence of unquoted service paths in the Windows service configuration, which could lead to an attacker executing arbitrary code with elevate...
EUVD-2020-1764
Malware in sbrugna...
Malicious code in vscode-js-profile-flame (npm)
The package vscode-js-profile-flame was found to contain malicious code...
Malicious code in flame-awklr-zlaf6-yarn-project (npm)
The package flame-awklr-zlaf6-yarn-project was found to contain malicious code...
Malicious code in flame-1aq5p-6oszx-xenith-project (npm)
The package flame-1aq5p-6oszx-xenith-project was found to contain malicious code...
Malicious code in meadow-6fvu8-ypn8o-flame-project (npm)
The package meadow-6fvu8-ypn8o-flame-project was found to contain malicious code...
Malicious code in flame-treasure-nsk229-project (npm)
The package flame-treasure-nsk229-project was found to contain malicious code...
MAL-2025-37844 Malicious code in unity-q3ts6-hznxu-flame-project (npm)
The package unity-q3ts6-hznxu-flame-project was found to contain malicious code...
MAL-2025-20660 Malicious code in flame-1aq5p-6oszx-xenith-project (npm)
The package flame-1aq5p-6oszx-xenith-project was found to contain malicious code...