1463 matches found
EUVD-2025-198299
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2025-36161 IBM Concert Software Information Disclosure
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2025-36161 IBM Concert Software Information Disclosure
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2025-36161
IBM Concert Software (versions 1.0.0–2.0.0) is affected by CVE-2025-36161 due to failure to properly enable HTTP Strict-Transport-Security, enabling potential information disclosure through MITM. The vulnerability concerns the web transport layer and could allow a remote attacker to obtain sensit...
IBM Concert 加密问题漏洞
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from a cryptographic issue vulnerability that stems from not properly enabling HTTP Strict Transport...
Malicious code in strict-jade-muskox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139048 Malicious code in strict-jade-muskox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117054
Malicious code in strict-jade-muskox npm...
EUVD-2025-102059
Malicious code in strictbonoboz3n npm...
EUVD-2025-74191
Malicious code in strictpinnipedtan-2 npm...
EUVD-2025-78196
Malicious code in strictvicunaz3n npm...
EUVD-2025-78195
Malicious code in strictxerinaez3n npm...
EUVD-2025-84164
Malicious code in strictchameleonz3n npm...
EUVD-2025-84163
Malicious code in stricttapirz3n npm...
Malicious code in strict_harrier_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673746e42d763d09bb8292b8cfdec5652690c69439b6993f29918948ce61c4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73483
Malicious code in strictharrierz3n npm...
EUVD-2025-66487
Malicious code in strictbugz3n npm...
EUVD-2025-51770
Malicious code in strict-fuchsia-dog npm...