251 matches found
CVE-2026-5454: Use of Hard-coded Cryptographic Key
A vulnerability was found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Performing a manipulation of the argument SegmentWriteKey results in use of hard-coded cryptographic key . The attack is...
FLIR Systems AX8 Cameras Command Injection (CVE-2023-51126)
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 Jan 2023 the FLIR AX8 should no longer be affected by the...
FLIR Systems AX8 Cameras OS Command Injection (CVE-2022-37061)
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow th...
PT-2026-3857
EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a DC ChargeLoopRes message that includes Receipt as well as TaxCosts, the vector tax costs in the target Receipt structure is accessed out of bounds. This occurs in the method template void...
CVE-2022-31313
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
CVE-2019-11700
A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox 67...
CVE-2023-54106
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5einitreprx The memory pointed to by the priv-rxres pointer is not freed in the error path of mlx5einitreprx, which can lead to a memory leak. Fix by freeing the memory in the error path,...
CVE-2023-54106
No public technical details about CVE-2023-54106 are present in the provided documents. The connected advisories list many CVEs but do not disclose specifics for this entry. Monitor vendor advisories for updates.
Malicious code in res-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32635
Malicious code in res-notification npm...
MAL-2025-48004 Malicious code in res-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2019-3370
Malware in sbrugna...
EUVD-2017-1868
Malware in sbrugna...
EUVD-2017-1872
Malware in sbrugna...
EUVD-2020-6919
Malware in sbrugna...
EUVD-2022-0368
Malicious code in bioql PyPI...
MAL-2025-31951 Malicious code in redux-res (npm)
The package redux-res was found to contain malicious code...
Malicious code in redux-res (npm)
The package redux-res was found to contain malicious code...
Asterisk 代码问题漏洞
Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk suffers from a code issue vulnerability that originates from a remote denial of service and possible remote code execution in...
CVE-2021-31787
The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMPfeaturesres packets...