111 matches found
Data Sharing Service Windows Privilege Escalation
The vulnerability of the Data Sharing Service client for the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to increase their privileges...
Malicious Package
Overview epic-service-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in epic-service-client (npm)
Source: amazon-inspector dace8c7467ca89f828a88fdae398bb44d6c7e2757575656ae63926697aaa4487 The package epic-service-client was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-73014: Missing Authorization
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...
PT-2026-109413
Уязвимость клиента службы обмена данными Data Sharing Service Client операционной системы Windows связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...
Malicious code in cs-security-service-client (npm)
The package cs-security-service-client was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in azure-iothub-service-client (npm)
Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...
Malicious code in osep-api-hub-service-client-v1 (npm)
Source: amazon-inspector cd131719d20e013a4627e1ea402ffc26135d66a5d6dd35669b8a3a6fb85e5f76 package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install. index.js collects host identifiers — os.hostname, os.userInfo username/uid/gid/shell, os.homedir,...
Malicious code in cugraph-service-client (PyPI)
Source: kam193 0246f55913ed7c36615843f23e434366bb7e1491332d526c91700a891ee8fde7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
Malicious code in azure-iothub-service-client (PyPI)
--- Credit: OpenSSF source...
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Path-Traversal - Arbitrary File Write in Assemblyline Service ClientIMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed within...
PYSEC-2026-1194 Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Path-Traversal - Arbitrary File Write in Assemblyline Service Client IMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed withi...
PT-2026-53592
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package...
EUVD-2025-209776
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
CVE-2025-65417
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
CVE-2025-65418
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
CVE-2025-65418: Improper Limitation of a Pathname to a Restricted Directory
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
CVE-2025-65417: Improper Neutralization of Input During Web Page Generation
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
