CVE-2022-35914-RCE

CVE-2022-35914 بواسطة cyb3rk0ala إثبات مفهوم PoC لـ CVE-2022-35914 ، وهي ثغرة حقن أوامر command-injection تتعلق بمكوّن الاختبار htmLawed في إصدارات GLPI المصابة. توفّر الأداة تنفيذ الأوامر عبر نقطة النهاية المصابة، وتتضمّن وظيفة callback اختيارية لبيئات المختبر المصرّح بها. إخلاء المسؤولية: هذا...

Malicious code in checkout-test-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dff84319052d8da1a322df80332f9d197a3e646f17c15b2fb5b53121f27dc0 On require of the package, index.js loads./runtime.js which unconditionally fetches a platform-specific executable from attacker-controlled Cloudflar...

MAL-2026-12595 Malicious code in checkout-test-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dff84319052d8da1a322df80332f9d197a3e646f17c15b2fb5b53121f27dc0 On require of the package, index.js loads./runtime.js which unconditionally fetches a platform-specific executable from attacker-controlled Cloudflar...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

The vulnerability of the vaddr-test component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vaddr-test component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Code Injection

nuxt is vulnerable to Code Injection. The vulnerability exists due to a lack of user input path validation in test-component-wrapper.ts which allows an attacker to inject and execute malicious code. Note that this vulnerability is only applicable if the server is ran on dev mode...

Malicious Package

Overview dash-generator-test-component-standard is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

CVE-2021-35307

An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4DescriptorFinder::Test component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service DOS...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

PT-2020-18866

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce NOW versions prior to 2.0.23 Windows, macOS NVIDIA GeForce NOW versions prior to 5.31 Android, Shield TV Description The issue concerns a vulnerability in the application software of NVIDIA GeForce NOW, specifically in the netwo...

CVE-2020-5976: Undefined Security Weakness

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2010-2276

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact...

CVE-2010-2276: Undefined Security Weakness

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact...