EUVD-2025-142323

Malicious code in diva-tugafbai-im npm...

MAL-2025-173949 Malicious code in diva-banubo-imubaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392222b6ccb8c87611396f9937d8be67bcdae57a12f045c041cca5240e945060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142439

Malicious code in diva-banbfo-imufai npm...

EUVD-2025-142438

Malicious code in diva-banbfo-imufngai npm...

MAL-2025-173908 Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173974 Malicious code in diva-tugafai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649af86e80276ebd2d5ddadbc4f5eb352d1fe2a3aa0cc8f8bffec594e4a1fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173901 Malicious code in diva-banib-imila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa0338cacc187a6c01758072746b80092b60e6536cd6e7753a84f7671c76d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-1999-1514

Malware in sbrugna...

EUVD-2020-7792

Malware in sbrugna...

EUVD-2014-9271

Malware in sbrugna...

CVE-2024-13151

Authorization Bypass Through User-Controlled SQL Primary Key, CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Logo Software Diva allows SQL Injection, CAPEC - 7 - Blind SQL Injection.This issue affects Diva: through 4.56.00.00...

PT-2025-38315

Name of the Vulnerable Software and Affected Versions Logo Software Retail Sales Management versions through 20250918 Logo Software Diva versions through 4.56.00.00 Description A SQL injection issue exists in Logo Software Retail Sales Management and Diva due to improper neutralization of special...

diva-design.hr Improper Access Control vulnerability OBB-3832330

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

Path traversal

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

CVE-2020-15809

CVE-2020-15809 affects SpinetiX devices via spxmanage, enabling SSRF and Path Traversal to access unintended resources. Affected are: HMP350, HMP300 and DiVA up to 4.5.2-1.0.36229; HMP400 and HMP400W up to 4.5.2-1.0.2-1eb2ffbd; and DSOS up to 4.5.2-1.0.2-1eb2ffbd. Root cause is SSRF/Path Traversa...

SpinetiX SpinetiX 路径遍历漏洞

SpinetiX is an application platform from SpinetiX Germany. A solution suite is available. A security vulnerability exists in SpinetiX devices that originates from requests to access unintended resources due to SSRF and path traversal. The following products and versions are affected: HMP350,...

CVE-2020-15809: Improper Limitation of a Pathname to a Restricted Directory

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...