139 matches found
MAL-2026-4697 Malicious code in twokey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c6d8e22fd03dd5ff39bac81bcbffd05db3b2a08dcf9768332094ffcca4eebd The package's postinstall hook unconditionally executes node bin/twokey.js --desktop --enable-autostart, which performs three install-time actions...
CVE-2026-8320
CVE-2026-8320 affects jishenghua jshERP up to 3.6. The vulnerability is in the getUserByWeixinCode function of jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java within the updatePlatformConfigByKey Endpoint. Manipulating the weixinUrl argument leads to server-side request forgery (SS...
CVE-2026-8320 jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode of the file jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java of the component updatePlatformConfigByKey Endpoint. Such manipulation of the argument weixinUrl lead...
Malicious code in @uc-platform/user-service-client-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...
MAL-2026-1641 Malicious code in @uc-platform/user-service-client-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...
CVE-2022-31267
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "admin"' value...
The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Identity Services Engine (ISE) allows a perpetrator to cause service interruptions.
The vulnerability of the RADIUS protocol implementation Remote Authentication in Dial-In User Service of the Cisco Identity Services Engine ISE platform is related to insufficient comparison. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Broadcast DVR User Service on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Broadcast DVR User Service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2025-60717 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
...
CVE-2025-60717 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
...
CVE-2025-60717
CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...
CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
...
CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
...
CVE-2025-59515
CVE-2025-59515 is a use-after-free vulnerability in Windows Broadcast DVR User Service that enables local privilege escalation for an authorized attacker. The NVD/NCSC entries confirm the impact as elevated rights locally, with CVSS v3.1 base score 7.0 (HIGH) and LOCAL/LOW privileges required, no...
