66 matches found
EUVD-2026-3061
Malicious code in originresponsehandler npm...
CVE-2025-15528: Improper Resource Shutdown or Release
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown functionality of the component GTPv2 Bearer Response Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may...
CVE-2026-22026 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, the libcurl writecallback function in the KMC...
CVE-2025-15419
A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992593)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992593 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix bad unlock balance in l2capdisconnectrsp conn-chanlock isn't acquired befor...
EUVD-2018-3835
Malware in sbrugna...
CVE-2025-8852
A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-8852 WuKongOpenSource WukongCRM API Response upload information exposure
A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-8852
A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-8852: Generation of Error Message Containing Sensitive Information
A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit ha...
Malicious code in servicecore-response-handler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efae7348c792464442a5508d7cd2907cd55c01835e4cc188b1e078b1b96beadc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in servicecore-response-handler
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-3083 Malicious code in servicecore-response-handler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efae7348c792464442a5508d7cd2907cd55c01835e4cc188b1e078b1b96beadc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Zabbix DNS Response Handler Buffer Overflow
The vulnerability of the DNS Response Handler component of the Zabbix universal monitoring agent is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...
PT-2023-8401 · Unknown +5 · Dns Server +5
Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue is caused by an improper check for RDLENGTH overflow in the buffer in response from the DNS server. This can lead to a buffer overflow. The vulnerability is related to...
Code injection
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler SEC-191...
CVE-2016-10789: Improper Input Validation
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler SEC-191...
PT-2019-7585
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows code execution via the cpsrvd 403 error response handler. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue...
Escape Sequence Injection
Ruby is vulnerable to escape sequence injection. This exists in the function Gem::GemcutterUtilitieswithresponse of the component API Response Handler. Gem::GemcutterUtilitieswithresponse may output the API response to stdout without any change. Modifications in the response from API side may cau...
Escape Sequence Injection
Ruby is vulnerable to escape sequence injection vulnerability. The vulnerability exists in an unknown code block of the component API Response Handler when gem owner command outputs the contents of the API response directly to stdout. An attacker could cause an escape sequence injection via a...