CVE-2026-94410 Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...

CVE-2026-94410 Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...

CVE-2026-94410

The Bender Custom&Partner Service is vulnerable to a Missing Authorization (CWE-862) flaw. A low-privileged remote attacker can access a list of roles that is intended to be restricted to administrators. This vulnerability results in a low-level confidentiality breach , although the documents sta...

Malicious Package

Overview bender-rspack-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in bender-rspack-config (npm)

Source: ossf-package-analysis 159730c04aeb50c0e832685be81c3f332d8692bf4a9f1a419c7223dbe5059491 The OpenSSF Package Analysis project identified 'bender-rspack-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

MAL-2026-16221 Malicious code in bender-rspack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6997cea54ae81d1addcb41ddac29e94923dfa1042265253c555cb4945ad5b4 package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL, embedding $whoami, $pwd, and $hostname as...

Malicious code in bender-rspack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6997cea54ae81d1addcb41ddac29e94923dfa1042265253c555cb4945ad5b4 package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL, embedding $whoami, $pwd, and $hostname as...

MAL-2025-160146 Malicious code in masako-bender-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070df7ffa9f72599623e7a7ada03884d3d16eb81bbcae820928c75aa92e777da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-21237

Malware in sbrugna...

EUVD-2021-21242

Malware in sbrugna...

EUVD-2019-9478

Malware in sbrugna...

EUVD-2021-21238

Malware in sbrugna...

EUVD-2021-21251

Malware in sbrugna...

EUVD-2021-21241

Malware in sbrugna...

EUVD-2021-21239

Malware in sbrugna...

Bender’s various products have security vulnerabilities

Bender CC612 and others are products of Bender, Germany.Bender CC612 is a charge controller.Bender CC613 is a charge controller.Bender ICC15xx is an insulation monitoring device. A security vulnerability exists in several Bender products, which stems from an insecure default configuration that...

Bender’s various products have security vulnerabilities

Bender CC612 and others are products of Bender, Germany.Bender CC612 is a charge controller.Bender CC613 is a charge controller.Bender ICC15xx is an insulation monitoring device. A security vulnerability exists in a number of Bender products, which stems from the ability to access credentials...

CVE-2019-19885

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0...

bender-photo.com Cross Site Scripting vulnerability OBB-3122795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in bender-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1b3d673f58d56435e2247ec618209b57a3c23bacdff658646c24daa2ff8ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...