Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2026/02/14 1:28 a.m.2 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS5.7AI score0.00056EPSS
Exploits0References1
OSV
OSV
added 2026/02/13 10:16 p.m.1 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2026/02/13 10:16 p.m.2 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

7.5CVSS0.00056EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/13 12:0 a.m.1 views

PT-2026-8040

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

5.7AI score0.00056EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/13 12:0 a.m.24 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

0.00056EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/13 12:0 a.m.3 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

5.7AI score0.00056EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/13 12:0 a.m.1 views

CVE-2025-70957

A Denial of Service DoS vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally executed "get methods." An attacker can inject a constructed Continuation object an internal TVM type that is normally...

5.7AI score0.00056EPSS
Exploits0References3
CVE
CVE
added 2026/02/13 12:0 a.m.4 views

CVE-2025-70957

TON Lite Server prior to v2024.09 contains a DoS vulnerability in how it handles external arguments passed to locally executed get methods. An attacker can inject a crafted Continuation object (an internal TVM type normally restricted within the VM). When executed, the malicious continuation can ...

7.5CVSS5.7AI score0.00056EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7561

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00508EPSS
Exploits1References5
Veracode
Veracode
added 2022/12/21 3:5 a.m.30 views

Denial Of Service (DoS)

lite-server is vulnerable to denial of service. The vulnerability is due to the decodeURI function which is unable to parse control characters allowing an attacker to cause an application crash via malicious HTTP request...

7.5CVSS7.1AI score0.00508EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/21 1:21 a.m.5 views

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.5AI score0.00508EPSS
Exploits1References3
CVE
CVE
added 2022/12/21 1:21 a.m.70 views

CVE-2022-25940

CVE-2022-25940 affects lite-server (all versions) with a DoS condition caused by HTTP requests containing control characters that decodeURI() cannot parse. This leads to an availability impact (DoS) as described in multiple sources; CVSS v3.1 base score 7.5 (HIGH) in NVD/Snyk records. A remediati...

7.5CVSS7.5AI score0.00508EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/12/21 1:21 a.m.11 views

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.7AI score0.00508EPSS
Exploits1References3
OSV
OSV
added 2022/12/20 6:30 a.m.1 views

GHSA-89W7-5Q45-R53W lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS7.1AI score0.00508EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/12/20 6:30 a.m.24 views

lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS2.7AI score0.00508EPSS
Exploits1References5Affected Software2
vulnersOsv
vulnersOsv
added 2022/12/20 6:30 a.m.2 views

2cs (=1.0.0), @abhishekgaps1/ts-2 (>=1.0.0 <=1.0.1) +75 more potentially affected by CVE-2022-25940 via lite-server (>=1.3.4 <=2.6.1)

lite-server NPM version =1.3.4, =1.0.0, =2.21.0, =0.0.8, =1.2.3, =1.0.48, =1.2.0, =0.1.0, =0.0.2, =1.0.0, =0.2.0, =0.2.3 - angular-two =1.0.0 - angular2-flash-message =0.0.4 and more Source cves: CVE-2022-25940 Source advisory: OSV:GHSA-89W7-5Q45-R53W...

7.5CVSS7.1AI score0.00508EPSS
Exploits1
OSV
OSV
added 2022/12/20 5:15 a.m.1 views

CVE-2022-25940

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2022/12/20 5:15 a.m.9 views

CVE-2022-25940

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

7.5CVSS0.00508EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/12/20 12:0 a.m.2 views

lite-server 安全漏洞

npm lite-server is a lightweight development-specific node server from the U.S. npm. It serves web applications. A security vulnerability exists in lite-server that stems from vulnerability to denial-of-service DoS attacks when an attacker sends an HTTP request with control characters that cannot...

7.5CVSS7.3AI score0.00508EPSS
Exploits1References4
Snyk
Snyk
added 2022/12/05 1:33 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

7.5CVSS7.1AI score0.00508EPSS
Exploits1References2
Rows per page
Query Builder