Lucene search
K

10 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-26289 Malicious code in mi-angular-vmp-auth-service (npm)

The package mi-angular-vmp-auth-service was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in mi-angular-vmp-auth-service (npm)

The package mi-angular-vmp-auth-service was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/04/24 9:2 p.m.0 views

MAL-2025-4206 Malicious code in ark-vmp-reverse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 28ac22df743a6a65eed4d1d25f66c0f3eb42c5235dc749a84162883d313bd415 During installation, a website with the current working dir is being called. It looks like something between spam and pentest as the website is most probably n...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/24 9:2 p.m.5 views

Malicious code in ark-vmp-reverse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 28ac22df743a6a65eed4d1d25f66c0f3eb42c5235dc749a84162883d313bd415 During installation, a website with the current working dir is being called. It looks like something between spam and pentest as the website is most probably n...

7.2AI score
Exploits0References1
NVD
NVD
added 2024/07/25 8:15 p.m.14 views

CVE-2024-38289

A boolean-based SQL injection issue in the Virtual Meeting Password VMP endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input...

9.8CVSS0.84253EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/07/25 12:0 a.m.17 views

CVE-2024-38289

A boolean-based SQL injection issue in the Virtual Meeting Password VMP endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input...

0.84253EPSS
Exploits1References2
NVD
NVD
added 2016/09/03 8:59 p.m.10 views

CVE-2016-6377

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager VMP allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager PAM API calls via unspecified vectors, aka Bug ID CSCuz52110...

8.1CVSS8.3AI score0.00335EPSS
Exploits0References2
Prion
Prion
added 2016/09/03 8:59 p.m.10 views

Authentication flaw

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager VMP allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager PAM API calls via unspecified vectors, aka Bug ID CSCuz52110...

6.8CVSS7.6AI score0.00335EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/09/03 8:0 p.m.12 views

CVE-2016-6377

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager VMP allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager PAM API calls via unspecified vectors, aka Bug ID CSCuz52110...

8.3AI score0.00335EPSS
Exploits0References2
CVE
CVE
added 2016/09/03 8:0 p.m.36 views

CVE-2016-6377

CVE-2016-6377 affects Cisco Virtual Media Packager (VMP) versions 2.6 and earlier. The vulnerability is due to lack of proper authentication for the Platform and Applications Manager (PAM) API, allowing an unauthenticated, remote attacker to bypass controls and issue arbitrary PAM API calls via u...

8.1CVSS8.2AI score0.00335EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder