CVE-2022-35266

A denial of service vulnerability exists in the webserver hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the...

CVE-2022-35878

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

CVE-2022-35879

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

CVE-2022-29477

An authentication bypass vulnerability exists in the web interface /action/factory functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP header can lead to authentication bypass. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-35881

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

CVE-2022-35269

A denial of service vulnerability exists in the webserver hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the...

CVE-2022-35264

A denial of service vulnerability exists in the webserver hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the...

CVE-2022-35263

A denial of service vulnerability exists in the webserver hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the...

PT-2022-22667 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of reques...

PT-2022-22669 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of reques...

PT-2022-22670 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of reques...

MAL-2022-6677 Malicious code in tttestsupport-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6506 Malicious code in test_1_61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955b9a03ce54025259247b2b1abd036da328a7f60332681cc9e178d8d66c4025 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2329 Malicious code in dapp2nix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6616eac43ff0c04ad7acf7bcfa5e995892088a6b2be461341dc7dd4f369a1a65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6363 Malicious code in surveyoptic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da0aa770f538629bb8b815cbcd90acf9beeab7da017676229febfcee4ac7120e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aae-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36e873811e988aacce5a1b80244d157a56da0753c128f1d7581878716119c230 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-36700 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the add ff action, dissect ieeeNUMBER pv0, and dissect...

The vulnerability in the implementation of the editPerson.action and struts2-rest-showcase/orders scripts on the Apache Struts software platform allows an attacker to perform XSS attacks.

The vulnerability of the editPerson.action and struts2-rest-showcase/orders implementations on the Apache Struts software platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute XSS attacks by using the...

MAL-2022-465 Malicious code in @nexthink/engage-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261969d8ab7bb5c57be893d75d5ac868b4c43fa2be37c4d22e0a97838b8e21ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-474 Malicious code in @nexthink/remote-action-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86698731809005faec3205f9983a58ba0618524c630cd71a9da2ed96bf1c8582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...