112 matches found
PT-2026-46048
Name of the Vulnerable Software and Affected Versions Securly Chrome Extension version 3.0.7 Description The extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP using the Fetch API. This represents an inconsistent implementation of Transport...
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability t...
Malicious code in xy-ai-chat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9025a3fddb0d31a5cd9114850b0ca859acf96e54649d4d2a9fe286b7ca015c xy-ai-chat ships a Lit web component whose bundled main entry hardcodes two plain-HTTP endpoints on a bare IPv4 address:...
Malicious code in @atlisp/mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f4a9667f0a13220de9b838fde4fc16bd5aaa7f79d91f1122725e4799582515 The package's MCP server auto-injects a LISP bootstrap into every CAD command sent through cadSend/cadSendWithResult, plus connectcad's initAtlisp an...
CVE-2026-27752 SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain...
CVE-2019-12820
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...
Exploit for Download of Code Without Integrity Check in Nicehash Quickminer
CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash...
EUVD-2019-4401
Malware in sbrugna...
EUVD-2018-0415
Malware in sbrugna...
EUVD-2020-29657
Malware in sbrugna...
EUVD-2019-7073
Malware in sbrugna...
EUVD-2019-7277
Malware in sbrugna...
EUVD-2012-2553
Malware in sbrugna...
EUVD-2012-2156
Malware in sbrugna...
EUVD-2017-8075
Malware in sbrugna...
EUVD-2007-1166
Malware in sbrugna...
EUVD-2023-12407
Malicious code in bioql PyPI...
EUVD-2022-28960
Malicious code in bioql PyPI...
EUVD-2021-8401
Malicious code in bioql PyPI...
EUVD-2025-18665
Malicious code in bioql PyPI...