MAL-2025-10703 Malicious code in @zalastax/nolb-arrl (npm)

The package @zalastax/nolb-arrl was found to contain malicious code...

Malicious code in @zalastax/nolb-arrl (npm)

The package @zalastax/nolb-arrl was found to contain malicious code...

arrl-ohio.org Cross Site Scripting vulnerability OBB-2837304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

arrl.org XSS vulnerability

Vulnerable URL: http://www.arrl.org/search/%22%3e%3csvg%20onload=alert%22OPENBUGBOUNTY%22%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41152 VIP website status:| Yes Coordinat...

arrl.org XSS vulnerability

Vulnerable URL: http://www.arrl.org/searches/results Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28158 Google Pagerank| 7 VIP website status:| Yes Check arrl.org SSL connection:...

CVE-2009-0124

The tqslverifyDataBlock function in opensslcert.cpp in American Radio Relay League ARRL tqsllib 2.0 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a...

CVE-2009-0124

The tqslverifyDataBlock function in opensslcert.cpp in American Radio Relay League ARRL tqsllib 2.0 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a...

CVE-2009-0124

The tqslverifyDataBlock function in opensslcert.cpp in American Radio Relay League ARRL tqsllib 2.0 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a...

CVE-2009-0124

Technical details (affected software/versions/root cause/remediation) are not publicly provided in the connected documents. The initial CVE description mentions OpenSSL EVP_VerifyFinal but does not enumerate affected products or fixes within this document set.