46 matches found
EUVD-2021-21220
Malware in sbrugna...
EUVD-2019-0044
Malware in sbrugna...
SUSE CVE-2025-11230
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...
EUVD-2024-45343
Malicious code in bioql PyPI...
📄 FullControl: Remote for Mac 4.0.5 Directory Traversal / Enumeration
FullControl Remote for Mac version 4.0.5 is vulnerable to an unauthenticated directory traversal flaw. An attacker can remotely enumerate and traverse arbitrary directories on the target system by sending crafted JSON requests to TCP port 2846. This vulnerability arises from insufficient input...
Malicious code in discord-json-requests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e36715204598c156e07aa9b146c861f5481df2d94c91e92f85569f217fa4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11136 Malicious code in discord-json-requests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e36715204598c156e07aa9b146c861f5481df2d94c91e92f85569f217fa4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-51408
AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials...
Phoenix Contact PLCnext Improper Input Validation (CVE-2021-34570)
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...
Lightbend Play Framework 资源管理错误漏洞
Lightbend Play Framework is a web application framework written in the Scala language from Lightbend, Inc. A resource management error vulnerability exists in Lightbend Play Framework versions 2.8.3 through 2.8.15, which results in a denial of service when using the FormbindFromRequest method on...
GHSA-58H8-44MG-R43X ReviewBoard and Djblets library are vulnerable to code execution
An eval vulnerability exists in Python Software Foundation Djblets version before 0.6.30 and 0.7.0 before 0.7.19 and Beanbag Review Board before 1.7.15 when parsing JSON requests allowing an attacker to execute arbitrary Python code...
ReviewBoard and Djblets library are vulnerable to code execution
An eval vulnerability exists in Python Software Foundation Djblets version before 0.6.30 and 0.7.0 before 0.7.19 and Beanbag Review Board before 1.7.15 when parsing JSON requests allowing an attacker to execute arbitrary Python code...
CVE-2021-34570
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests...
Code injection
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests...
CVE-2021-34570
Phoenix Contact PLCnext Control devices (versions prior to 2021.0.5 LTS) are affected by CVE-2021-34570. The issue is a DoS caused by specially crafted JSON requests, reducing availability. The NVD/CVSS reports a HIGH impact with network attack vector and low complexity. Remediation in the provid...
Code injection
An eval vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests...
CVE-2019-17673
WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header...
Design/Logic Flaw
WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header...
