1745 matches found
Malware in uikit-app-promotions-sample
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-8976 Malicious code in uikit-app-promotions-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d19072ff8c8ab1bd3da76aae8b83610fb37811142076666d675f5a7e2fbae6f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ffmpeg:ffmpeg_SWR_fuzzer: Use-of-uninitialized-value in swri_rematrix
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4905557943713792 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
json-c: Buffer Overflow
Background json-c is a JSON implementation in C. Description Please review the CVE identifier referenced below for details. Impact A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit. Workaround There is no known workaround at this tim...
CVE-2024-7216
A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The complexity of an attack is rather high. The exploitability is told to be...
TOTOLINK LR1200GB 安全漏洞
The TOTOLINK LR1200 is a wireless router designed for 4G LTE networks. The TOTOLINK LR1200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample page containing a use of hard-coded passwords. No details of the vulnerability are provided at this time...
Microsoft Azure SQL Workshop azuremlsampleexperiments Uncontrolled Search Path Element Vulnerability
This vulnerability allows remote attackers to manipulate sample datasets on affected installations of SQL Workshop for Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of SQL Workshop. When installed from the official...
CVE-2024-7155
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...
TOTOLINK A3300R 安全漏洞
The TOTOLINK A3300R is a wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3300R is vulnerable to a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /etc/shadow.sample file. No details of the vulnerability are provided at...
[NetScaler] Squid may record "error:transaction-end-before-headers" when be the service of LB
In a NetScaler Load Balancing deployment, you may have a Squild proxy server configured as a NetScaler LB Service. And you may observe "error:transaction-end-before-headers" recorded on Squid server. The error apears periodically with several seconds interval. Log sample: Timestamp xxxx...
Malicious code in render-sample-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531acbb1583ee41c2b1d689b07228870c585ff764c2fc902a93854b566181af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7097 Malicious code in render-sample-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531acbb1583ee41c2b1d689b07228870c585ff764c2fc902a93854b566181af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in render-sample-app
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
The vulnerability of the Labvantage LIMS file /labvantage/rc?command=page&page=LV_ViewSampleSpec&oosonly=Y&_sdialog=Y allows a attacker to execute XSS attacks.
The vulnerability of the Labvantage LIMS file /labvantage/rc?command=page&page=LVViewSampleSpec&oosonly=Y&sdialog=Y is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks through the...
DEBIAN-CVE-2024-6062
A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swfsvgaddisosample of the file src/filters/loadtext.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be...
PT-2024-37356 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problematic issue was found, affecting the swf svg add iso sample function of the src/filters/load text.c file in the MP4Box component. This issue leads to a null pointer dereferenc...
TRENDnet TEW-814DAP Security Vulnerability
The TRENDnet TEW-814DAP is a wireless access point from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-814DAP v1FW1.01B01 version that stems from a hard-coded password vulnerability in /etc/shadow.sample that allows an attacker to log in as root...
PT-2024-27697 · Trendnet · Trendnet Tew-814Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: The issue allows attackers to log in as root due to a hardcoded password vulnerability found in /etc/shadow.sample. This enables unauthorized access to the system. Recommendations: For...
Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters
Cybersecurity researchers have warned of an ongoing cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency. Cloud security firm Wiz, which shed light on the activity, said it's an updated variant of a financially motivated operation that was first documente...
