Lucene search
+L

251 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•2 views

CVE-2026-5454: Use of Hard-coded Cryptographic Key

A vulnerability was found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Performing a manipulation of the argument SegmentWriteKey results in use of hard-coded cryptographic key . The attack is...

4.8CVSS4.8AI score0.00147EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/19 12:00 a.m.•13 views

FLIR Systems AX8 Cameras Command Injection (CVE-2023-51126)

Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 Jan 2023 the FLIR AX8 should no longer be affected by the...

9.8CVSS8AI score0.31097EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/02/19 12:00 a.m.•8 views

FLIR Systems AX8 Cameras OS Command Injection (CVE-2022-37061)

All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow th...

9.8CVSS7.7AI score0.99607EPSS
SaveExploits11References14
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•23 views

PT-2026-3857

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a DC ChargeLoopRes message that includes Receipt as well as TaxCosts, the vector tax costs in the target Receipt structure is accessed out of bounds. This occurs in the method template void...

7.4CVSS5.6AI score0.00275EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:47 a.m.•22 views

CVE-2022-31313

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

9.8CVSS8.3AI score0.01825EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:11 a.m.•17 views

CVE-2019-11700

A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox 67...

6.5CVSS7.1AI score0.01372EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/12/24 1:16 p.m.•12 views

CVE-2023-54106

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5einitreprx The memory pointed to by the priv-rxres pointer is not freed in the error path of mlx5einitreprx, which can lead to a memory leak. Fix by freeing the memory in the error path,...

5.9AI score0.00206EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/24 1:06 p.m.•38 views

CVE-2023-54106

No public technical details about CVE-2023-54106 are present in the provided documents. The connected advisories list many CVEs but do not disclose specifics for this entry. Monitor vendor advisories for updates.

5.9AI score0.00206EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/07 4:34 a.m.•10 views

Malicious code in res-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 4:34 a.m.•11 views

EUVD-2025-32635

Malicious code in res-notification npm...

6.6AI score
SaveExploits0References1
OSV
OSV
•added 2025/10/07 4:34 a.m.•9 views

MAL-2025-48004 Malicious code in res-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-3370

Malware in sbrugna...

6.5CVSS7.1AI score0.01372EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-1868

Malware in sbrugna...

5CVSS5.7AI score0.00367EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-1872

Malware in sbrugna...

7CVSS7.2AI score0.0049EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-6919

Malware in sbrugna...

5.3CVSS6.6AI score0.01697EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-0368

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01825EPSS
SaveExploits0References5
OSV
OSV
•added 2025/08/14 6:52 p.m.•5 views

MAL-2025-31951 Malicious code in redux-res (npm)

The package redux-res was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in redux-res (npm)

The package redux-res was found to contain malicious code...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•20 views

Asterisk 代码问题漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk suffers from a code issue vulnerability that originates from a remote denial of service and possible remote code execution in...

6.5CVSS8AI score0.00452EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:53 p.m.•16 views

CVE-2021-31787

The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMPfeaturesres packets...

6.5CVSS6.6AI score0.0051EPSS
SaveExploits0References1
Rows per page
Query Builder