2 matches found
Malicious code in delivery-ci-storyshots (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34974cf17a445c363a201ebcc43e976f13072ebecd78c6c5cd59f2e0790f3eb index.js unconditionally requires./adapter on load. adapter.js selects a platform-specific endpoint and downloads an opaque binary over HTTPS from on...
6.4AI score
SaveExploits0References1
SUSE CVE-2010-2253
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...
6.8CVSS7.6AI score0.03287EPSS
SaveExploits0References3
20