721 matches found
CVE-2026-25599: Improper Neutralization of Input During Web Page Generation
Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface. Older Orca heat pump devices...
Linux kernel USB device support driver Heap Buffer Overflow DoS
The vulnerability of the uvcgvideopump function in the drivers/usb/gadget/function/uvcvideo.c file of the Linux device support driver module involves exposing confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2021-33883
A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration...
CVE-1999-0814
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations...
CVE-2024-2063
A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...
CVE-2024-2061
A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/editsupplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...
CVE-2024-2062
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects some unknown processing of the file /admin/editcategories.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
Malicious code in buta-faina-agaana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in icha-25 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in agricultural_mammal_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fc4b13dd6b2b59d0f7f6210d249cc3db753129912b21c8c52521965a258119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2011-3349
Malware in sbrugna...
EUVD-2016-4515
Malware in sbrugna...
EUVD-2020-22762
Malware in sbrugna...
EUVD-2006-0266
Malware in sbrugna...
EUVD-2006-0267
Malware in sbrugna...
EUVD-2008-2597
Malware in sbrugna...
EUVD-2008-2603
Malware in sbrugna...
EUVD-2008-1820
Malware in sbrugna...