EUVD-2019-18534

Malware in sbrugna...

EUVD-2019-18535

Malware in sbrugna...

EUVD-2019-18536

Malware in sbrugna...

EUVD-2013-4028

Malware in sbrugna...

EUVD-2013-4027

Malware in sbrugna...

MAL-2025-11206 Malicious code in @zalastax/nolb-ds3 (npm)

The package @zalastax/nolb-ds3 was found to contain malicious code...

Malicious code in @zalastax/nolb-ds3 (npm)

The package @zalastax/nolb-ds3 was found to contain malicious code...

CVE-2013-4098

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...

CVE-2013-4097

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message...

CVE-2019-9158

Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control...

CVE-2019-9156

Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection...

CVE-2013-4096

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

CVE-2019-9157

Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...

CVE-2019-9158

Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control...

CVE-2019-9157

Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...

CVE-2019-9158

Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control...

Command injection

Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection...

CVE-2019-9156

Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection...

Arbitrary file deletion

Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...

CVE-2019-9156

Gemalto DS3 Authentication Server (Ezio/DS3) before version 3.1.0 is vulnerable to OS command injection (CVE-2019-9156). The SEC Consult advisory describes multiple vulnerabilities in Ezio/DS3, with the fixed release being Ezio DS3 server v3.1.0. Impact details per sources indicate command execut...