51 matches found
KLA90937 OSI vulnerability in Microsoft Browser
An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-26133 Exploitation Related products Microsoft-Edge CVE list CVE-2026-26133 high Solution Install necessary updates...
Malicious code in oj-sp-about-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88af67380622acfe95b416c0349a87adf700798459b1b7794578e38d057a2bf6 The package oj-sp-about-page was found to contain malicious code. Source: ghsa-malware 4bece5a0063e69e6b490afd2ca5d92fce9ce26e5c729f5f550f9acca50eb10...
MAL-2026-60 Malicious code in oj-sp-about-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88af67380622acfe95b416c0349a87adf700798459b1b7794578e38d057a2bf6 The package oj-sp-about-page was found to contain malicious code. Source: ghsa-malware 4bece5a0063e69e6b490afd2ca5d92fce9ce26e5c729f5f550f9acca50eb10...
EUVD-2026-1137
Malicious code in oj-sp-about-page npm...
Malicious Package
Overview oj-sp-about-page is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2023-53772
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
EUVD-2023-60180
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
CVE-2023-53772
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
CVE-2023-53772
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
CVE-2023-53772 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
CVE-2023-53772 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...
CVE-2023-53772
CVE-2023-53772 concerns MiniDVBLinux 5.4 with an arbitrary file disclosure via the about page. The vulnerability arises from improper handling of the GET parameter file used to disclose arbitrary file contents, enabling path traversal to read system files. Public descriptions from multiple source...
PT-2025-50269
Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4 Description MiniDVBLinux version 5.4 contains a flaw that allows attackers to read sensitive system files. This is possible through the 'file' GET parameter on the about page, enabling disclosure of arbitrary file...
CVE-2025-13275
CVE-2025-13275 concerns the Iqbolshoh php-business-website up to a rolling release build. All connected sources describe an issue in the file /admin/about.php that permits unrestricted file upload, with exploitation possible remotely. The vulnerability is widely reported as already disclosed publ...
CVE-2025-12461 Unprotected access to parts of the application in Epsilon RH by Grupo Castilla
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...
CVE-2025-12461
CVE-2025-12461 affects Grupo Castilla Epsilon RH. The issue allows an attacker to access the unprotected path …/epsilonnet/License/About.aspx and disclose license details and product configuration, including installed modules. The root cause is lack of access control on that path. Impact is infor...
EUVD-2021-31876
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-45085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS...
GHSA-6PFC-W86R-54Q6 Welcome and About GeoServer pages communicate version and revision information
Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...
Exploit for CVE-2024-27697
FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Serve...