Lucene search
+L

37 matches found

RedhatCVE
RedhatCVE
•added 2026/02/14 1:28 a.m.•15 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS5.7AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/13 10:16 p.m.•15 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS0.0036EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/13 12:00 a.m.•8 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

5.9AI score0.0036EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/13 12:00 a.m.•15 views

PT-2026-8040

Name of the Vulnerable Software and Affected Versions TON Lite Server versions prior to 2024.09 Description A Denial of Service DoS issue exists in the handling of external arguments passed to “get methods” in the TON Lite Server. An attacker can inject a crafted Continuation object, normally...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References9
OSV
OSV
•added 2026/02/13 12:00 a.m.•12 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS5.7AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/02/13 12:00 a.m.•7 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

5.7AI score0.0036EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/13 12:00 a.m.•45 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

0.0036EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/13 12:00 a.m.•33 views

CVE-2025-70957

The TON Lite Server (versions prior to v2024.09 ) is vulnerable to a Denial of Service (DoS) condition due to improper handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object (an internal TVM type normally restricted within...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/13 12:00 a.m.•1 views

CVE-2025-70957: Uncontrolled Recursion

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2022-7561

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01188EPSS
SaveExploits1References5
Veracode
Veracode
•added 2022/12/21 3:05 a.m.•36 views

Denial Of Service (DoS)

lite-server is vulnerable to denial of service. The vulnerability is due to the decodeURI function which is unable to parse control characters allowing an attacker to cause an application crash via malicious HTTP request...

7.5CVSS7.1AI score0.01188EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/12/21 1:21 a.m.•93 views

CVE-2022-25940

CVE-2022-25940 affects lite-server (all versions) with a DoS condition caused by HTTP requests containing control characters that decodeURI() cannot parse. This leads to an availability impact (DoS) as described in multiple sources; CVSS v3.1 base score 7.5 (HIGH) in NVD/Snyk records. A remediati...

7.5CVSS7.5AI score0.01188EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/21 1:21 a.m.•10 views

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.5AI score0.01188EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/12/21 1:21 a.m.•47 views

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.7AI score0.01188EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•2 views

CVE-2022-25940: Improper Input Validation

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS5.7AI score0.01188EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/20 6:30 a.m.•22 views

GHSA-89W7-5Q45-R53W lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.1AI score0.01188EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
•added 2022/12/20 6:30 a.m.•4 views

2cs (1.0.0), @abhishekgaps1/ts-2 (>=1.0.0, <=1.0.1) +74 more potentially affected by CVE-2022-25940 via lite-server (>=2.2.2, <=2.6.1)

lite-server NPM version =2.2.2, =1.0.0, =2.21.0, =0.0.8, =1.2.3, =1.0.48, =1.2.0, =0.1.0, =0.0.2, =1.0.0, =0.2.0, =0.2.3 - angular-two 1.0.0 - angular2-flash-message 0.0.4 and more Source cves: CVE-2022-25940 Source advisory: OSV:GHSA-89W7-5Q45-R53W...

7.5CVSS7.4AI score0.01188EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/12/20 6:30 a.m.•36 views

lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS2.7AI score0.01188EPSS
SaveExploits1References5Affected Software2
NVD
NVD
•added 2022/12/20 5:15 a.m.•40 views

CVE-2022-25940

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS0.01188EPSS
SaveExploits1References3
OSV
OSV
•added 2022/12/20 5:15 a.m.•12 views

CVE-2022-25940

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS5.8AI score0.01188EPSS
SaveExploits1References3
Rows per page
Query Builder