4 matches found
MAL-2026-12210 Malicious code in statist-browser-typed-client-investing.product.loginandauthorization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508b23be5504ec69bf284c9a99bb7840e284c52862e07588b07807ebc4f0d71c index.js unconditionally requires./bridge on load. bridge.js selects a per-OS binary URL from a list of string-split-concealed hosts...
CVE-2026-6790: Improper Input Validation
In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present. This was not enforced in earlier HTTP RFC for example, in RFC 2616, but it is in the latest RFC 9110 and 9112. This...
DVR-Exploiter - Bash Script Program Exploit The DVR's Based On CVE-2018-9995
DVR-Exploiter Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter By: Belahsan Ouerghi Contact: www.facebook.com/ouerghi.belahsan Youtube Tutorial: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp" "Server:...
[SA18980] MUTE P2P File Sharing Host Selection Weakness
TITLE: MUTE P2P File Sharing Host Selection Weakness SECUNIA ADVISORY ID: SA18980 VERIFY ADVISORY: http://secunia.com/advisories/18980/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: MUTE 0.x http://secunia.com/product/8279/ DESCRIPTION: Gary Whetstone has reported a...