Lucene search
+L

15 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-51248

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00446EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 6:45 a.m.•21 views

CVE-2024-12989

A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was...

6.9CVSS6.8AI score0.00446EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/27 6:15 p.m.•47 views

CVE-2024-12989

A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was...

6.9CVSS0.00446EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/27 5:31 p.m.•45 views

CVE-2024-12989 WISI Tangram GT31 HTTP Request server-side request forgery

A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was...

6.9CVSS0.00446EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/27 5:31 p.m.•79 views

CVE-2024-12989

CVE-2024-12989 concerns WISI Tangram GT31. The vulnerability affects an unknown function within the device’s HTTP Request Handler, enabling server-side request forgery (SSRF). Reports across multiple sources (Red Hat, PT-Security, CNNVD, NVD/CVELIST) indicate the issue can be exploited remotely a...

6.9CVSS5.2AI score0.00446EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 5:31 p.m.•29 views

CVE-2024-12989 WISI Tangram GT31 HTTP Request server-side request forgery

A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was...

6.9CVSS5.2AI score0.00446EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•12 views

CVE-2024-12989: Server-Side Request Forgery (SSRF)

A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was...

6.9CVSS5.2AI score0.00446EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•21 views

WISI Tangram GT31 code issue vulnerability

WISI Tangram GT31 is a module for a high-density digital platform from WISI. A code issue vulnerability exists in WISI Tangram GT31 20241214 and prior versions that stems from a component HTTP request handler that can lead to server-side request forgery...

6.9CVSS5.8AI score0.00446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•17 views

PT-2024-17851 · Wisi · Wisi Tangram Gt31

Name of the Vulnerable Software and Affected Versions: WISI Tangram GT31 versions up to 20241214 Description: A server-side request forgery issue affects an unknown functionality of the component HTTP Request Handler. This issue can be exploited remotely. The vendor was contacted about this...

6.9CVSS6.9AI score0.00446EPSS
SaveExploits0References7
osv_mal
osv_mal
•added 2024/06/25 12:23 p.m.•5 views

MAL-2024-3078 Malicious code in tangram (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/03/23 5:30 a.m.•7 views

Malware in @xivart/tangram

Invalid Advisory This advisory has been withdrawn as the ownership has been transferred to a valid owner organization. This link is maintained to preserve external references. Original Description Any computer that has this package installed or running should be considered fully compromised. All...

5.8AI score
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/09/23 12:00 a.m.•4 views

WS-2021-0385

In tangram NPM module, versions v0.1.0 through v0.21.1 are vulnerable to Prototype Pollution vulnerability since the function mergeObjects does not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or be able to...

9.8CVSS6AI score
SaveExploits0References1
hackapp
hackapp
•added 2016/04/01 10:19 a.m.•16 views

Creative Tangram - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Creative Tangram published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 10:00 a.m.•17 views

Tangram - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Tangram published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 10:00 a.m.•17 views

Tangram HD - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tangram HD published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder