Lucene search
K

5 matches found

OSV
OSV
added 2026/03/10 8:24 a.m.4 views

MAL-2026-1320 Malicious code in chain-promised-await (npm)

Remote code execution via fetching code from a remote URL and Discord webhook usage indicates malicious intent. Single version adds to suspicion. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b882a33fdd394ef7a848100d8ee39ef4c7f0747942b4bea86e38af5780c978 The...

6.3AI score
Exploits0References2
OSV
OSV
added 2025/11/05 6:15 a.m.1 views

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

8.1CVSS5.9AI score0.00343EPSS
Exploits0References1
CVE
CVE
added 2025/11/05 5:41 a.m.8 views

CVE-2025-21079

Samsung Members before version 5.5.01.3 has an input validation flaw that allows a remote attacker to connect to an arbitrary URL and launch arbitrary Samsung Members–privileged activities. User interaction is required to trigger the issue. Public sources in multiple feeds corroborate this CVE (C...

8.1CVSS6.6AI score0.00343EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/05 5:41 a.m.2 views

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

7.1CVSS6.6AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2017/05/22 5:29 a.m.1 views

CVE-2017-2497

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...

6.1CVSS7.5AI score0.00854EPSS
Exploits1References3
Rows per page
Query Builder