GHSA-CJCG-CXMH-9WCR Praxis affected by HTTP/2 Bomb

Summary Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have been rated with a severity impact of Important. The vulnerabilities target HPACK, the header compression scheme in HTTP/2, where a small request can trigger large memory allocations ...

Praxis affected by HTTP/2 Bomb

Summary Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have been rated with a severity impact of Important. The vulnerabilities target HPACK, the header compression scheme in HTTP/2, where a small request can trigger large memory allocations ...

From Signals to Behaviors: Evidence-Based Android Malware Detection

Android malware remains a persistent threat, and detecting it accurately is a long-standing open problem. Whether an app is malicious depends on what it actually does and the context in which it does it, not on the surface signals it happens to exhibit. Existing detectors instead reason about...

bittensor (>=2.1.0, <=3.5.1), converse-sfr (0.0.2) +9 more potentially affected by CVE-2026-0994 via protobuf (3.15.0)

protobuf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bittensor =2.1.0, =0.10.4, =1.1.10, =0.1.0, =0.1.8b3, =0.7.11, =0.5.6.dev85, =0.5.6.dev87 Source cves: CVE-2026-0994 Source advisory:...

bittensor (>=2.1.0, <=3.5.1), converse-sfr (0.0.2) +9 more potentially affected by CVE-2025-4565 via protobuf (3.15.0)

protobuf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bittensor =2.1.0, =0.10.4, =1.1.10, =0.1.0, =0.1.8b3, =0.7.11, =0.5.6.dev85, =0.5.6.dev87 Source cves: CVE-2025-4565 Source advisory:...

MAL-2026-1362 Malicious code in praxis-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f147ac7e867b493ef159ddfdd294c57a1bfbbd8e502037178470c37345ca0628 The package praxis-scripts was found to contain malicious code. Source: ghsa-malware 9cf02a0374cd88b4ae46f34a484f0441ea2bfaf3c6799812ea6b4cf4e916cd0c...

Malicious code in praxis-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f147ac7e867b493ef159ddfdd294c57a1bfbbd8e502037178470c37345ca0628 The package praxis-scripts was found to contain malicious code. Source: ghsa-malware 9cf02a0374cd88b4ae46f34a484f0441ea2bfaf3c6799812ea6b4cf4e916cd0c...

Malicious Package

Overview praxis-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

praxis-schaffner.de Cross Site Scripting vulnerability OBB-4043588

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-eick.de Cross Site Scripting vulnerability OBB-3950029

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-eick-pesch.de Cross Site Scripting vulnerability OBB-3950028

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-knizia.de Cross Site Scripting vulnerability OBB-3917766

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-dr-wiesen.de Cross Site Scripting vulnerability OBB-3897707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hno-praxis-geesthacht.de Cross Site Scripting vulnerability OBB-3855510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-ploetz.de Improper Access Control vulnerability OBB-3820167

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-georgalis.de Improper Access Control vulnerability OBB-3820165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-creutzberg.de Improper Access Control vulnerability OBB-3820164

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-am-hindenburgplatz.de Improper Access Control vulnerability OBB-3820163

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

praxis-kindertraum.at Improper Access Control vulnerability OBB-3781280

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

frauenarzt-praxis-mannheim.de Improper Access Control vulnerability OBB-3778486

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...