103 matches found
Omnia MPX 1.5.0+r1 - Local File Inclusion
Telos Alliance Omnia MPX Node through 1.5.0+r1 is vulnerable to local file inclusion via logs/downloadMainLog. By retrieving userDB.json allows an attacker to retrieve cleartext credentials and escalate privileges via the control panel. id: CVE-2022-36642 info: name: Omnia MPX 1.5.0+r1 - Local Fi...
EUVD-2020-9336
Malware in sbrugna...
EUVD-2019-18910
Malware in sbrugna...
EUVD-2019-18914
Malware in sbrugna...
EUVD-2019-18913
Malware in sbrugna...
EUVD-2019-18912
Malware in sbrugna...
EUVD-2019-18911
Malware in sbrugna...
EUVD-2019-18909
Malware in sbrugna...
EUVD-2022-48428
Malicious code in bioql PyPI...
EUVD-2022-46364
Malicious code in bioql PyPI...
EUVD-2022-46365
Malicious code in bioql PyPI...
Malicious code in test-mlw1-telos-stulm-table-paras (npm)
The package test-mlw1-telos-stulm-table-paras was found to contain malicious code...
MAL-2025-36424 Malicious code in test-mlw2-telos-stulm-table-paras (npm)
The package test-mlw2-telos-stulm-table-paras was found to contain malicious code...
MAL-2025-34811 Malicious code in test-mlw1-telos-stulm-table-paras (npm)
The package test-mlw1-telos-stulm-table-paras was found to contain malicious code...
MAL-2025-8998 Malicious code in @malware-test-telos-stulm-table-paras/test-mlw3-telos-stulm-table-paras (npm)
The package @malware-test-telos-stulm-table-paras/test-mlw3-telos-stulm-table-paras was found to contain malicious code...
Malicious code in test-mlw2-telos-stulm-table-paras (npm)
The package test-mlw2-telos-stulm-table-paras was found to contain malicious code...
CVE-2022-43325
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3. - 1.4. allows attackers to execute arbitrary commands via a crafted payload injected into the license input...
CVE-2022-45562
Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...
CVE-2022-43326
An Insecure Direct Object Reference IDOR vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4. allows attackers to arbitrarily change user and Administrator account passwords...
CVE-2022-36642
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...