Lucene search
+L

17 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/09 3:55 p.m.•45 views

Malicious code in express-router-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49091d8e8923e3e709cebd14f01ee1617267bf3f9b6be99052603715b7cf9f70 The sole shipped file index.js is a heavily obfuscated RC4 + base64 string-array, 337-entry rotated array, control-flow flattening IIFE that executes...

6.1AI score
SaveExploits0References4
OSV
OSV
•added 2026/07/09 3:55 p.m.•21 views

MAL-2026-10063 Malicious code in express-router-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49091d8e8923e3e709cebd14f01ee1617267bf3f9b6be99052603715b7cf9f70 The sole shipped file index.js is a heavily obfuscated RC4 + base64 string-array, 337-entry rotated array, control-flow flattening IIFE that executes...

6.2AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 12:47 p.m.•31 views

Malicious code in dwagger-express-router (npm)

--- -= Per source details. Do not edit below this line.=-...

5.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/07 12:47 p.m.•13 views

MAL-2026-7254 Malicious code in dwagger-express-router (npm)

--- -= Per source details. Do not edit below this line.=-...

6.1AI score
SaveExploits0References1
OSV
OSV
•added 2020/11/18 2:15 p.m.•10 views

DEBIAN-CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.4CVSS7.2AI score0.01108EPSS
SaveExploits1References1
OSV
OSV
•added 2020/11/18 2:15 p.m.•29 views

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.4CVSS6.8AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2020/11/18 2:15 p.m.•35 views

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.5CVSS6.8AI score0.01108EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2020/11/18 2:15 p.m.•100 views

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.5CVSS4.3AI score0.01108EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/11/18 1:34 p.m.•47 views

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.4AI score0.01108EPSS
SaveExploits1References2
CVE
CVE
•added 2020/11/18 1:34 p.m.•97 views

CVE-2020-28361

Kamailio (used in SER/Sippy Softswitch) up to version before 5.4.0 is affected by a header-smuggling bypass in the remove_hf function of the Kamailio textops module. The vulnerability can be exploited by a skilled attacker with valid credentials to bypass header-removal protections and disrupt in...

5.5CVSS5.3AI score0.01108EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2020/11/18 1:34 p.m.•77 views

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

5.5CVSS7.4AI score0.01108EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•38 views

SIP Express Router Missing To in ACK DoS

The remote host is a SIP Express Router SER. The SER product has been found to contain a vulnerability where ACKs requests without a To header, when SER has been enabled to use the SL module, can be used to crash the product. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might ...

5CVSS6.9AI score0.05EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•21 views

SIP Express Router Register Buffer Overflow

The remote host is running a SIP Express Router. A bug has been found in the remote device which may allow an attacker to crash this device by sending a too long contact list in REGISTERs. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced source...

7.3AI score
SaveExploits0References2
CVE
CVE
•added 2005/03/11 5:00 a.m.•72 views

CVE-2003-1113

The SIP vulnerability CVE-2003-1113 affects IPTel SIP Express Router (SER) 0.8.9 and earlier. Remote attackers can craft INVITE messages to trigger a denial of service and possibly execute arbitrary code, as demonstrated by the OUSPG PROTOS c07-sip test suite. The provided documents do not includ...

7.5CVSS7.8AI score0.05144EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2005/03/11 5:00 a.m.•34 views

CVE-2003-1113

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

7.8AI score0.05144EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/11 12:00 a.m.•7 views

CVE-2003-1113: Undefined Security Weakness

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

7.5CVSS6.3AI score0.05144EPSS
SaveExploits1References1
NVD
NVD
•added 2003/12/31 5:00 a.m.•21 views

CVE-2003-1113

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

7.5CVSS7.8AI score0.05144EPSS
SaveExploits1References6
Rows per page
Query Builder