5534 matches found
Design/Logic Flaw
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device...
CVE-2024-1040
CVE-2024-1040 affects Gessler GmbH WEB-MASTER, specifically version 7.9, where user passwords are stored using a weak hashing algorithm. The weakness allows an attacker to restore passwords by breaking the stored hashes (confirmed by multiple sources in connected documents). This vulnerability ha...
vantage6-algorithm-store (>=4.10.0 <=4.15.1rc1), vantage6-node (>=0.0.0 <=4.15.1rc1) +1 more potentially affected by CVE-2024-22193 via vantage6 (>=0.0.0 <=4.1.3)
vantage6 PYPI version =0.0.0, =4.10.0, =0.0.0, =0.0.0, =4.15.1rc1 Source cves: CVE-2024-22193 Source advisory: OSV:GHSA-RJMV-52MP-GJRR...
GHSA-W9H2-PX87-74VX vantage6 remote code execution vulnerability
Impact Authenticated users could inject code into algorithm environment variables Workarounds No...
vantage6 remote code execution vulnerability
Impact Authenticated users could inject code into algorithm environment variables Workarounds No...
Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives
A Brazilian law enforcement operation has led to the arrest of several Brazilian operators in charge of the Grandoreiro malware. The Federal Police of Brazil said it served five temporary arrest warrants and 13 search and seizure warrants in the states of São Paulo, Santa Catarina, Pará, Goiás, a...
New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility
Threat hunters have identified a new campaign that delivers the ZLoader malware, resurfacing nearly two years after the botnet's infrastructure was dismantled in April 2022. A new variant of the malware is said to have been in development since September 2023, Zscaler ThreatLabz said in an analys...
PT-2024-18997 · Vantage6 · Vantage6
Name of the Vulnerable Software and Affected Versions: vantage6 versions prior to 4.2.0 Description: The vantage6 technology is used to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Authenticated users could inject code into algorithm...
vantage6 Security Vulnerabilities
vantage6 is a vantage6 open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability previously existed in vantage6 version 4.2.0 that stemmed from an authenticated user being able to inject code into an algorithmic environment variable...
GHSA-7XM8-WJQ7-88R5 DeviceFarmer stf uses DES-ECB
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...
GHSA-WPXW-5XFM-X22V MeshCentral algorithm-downgrade issue
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...
DeviceFarmer stf uses DES-ECB
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...
MeshCentral algorithm-downgrade issue
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...
CVE-2023-51839
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...
CVE-2023-51842
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...
Design/Logic Flaw
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...
libssh: NULL pointer dereference during rekeying with algorithm guessing
A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...
Moderate: Red Hat Security Advisory: libssh security update
An update for libssh is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2023-51842
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...
PT-2024-14311 · Devicefarmer · Devicefarmer Stf
Name of the Vulnerable Software and Affected Versions: DeviceFarmer stf version 3.6.6 Description: The issue is related to the use of a broken or risky cryptographic algorithm. Recommendations: For DeviceFarmer stf version 3.6.6, at the moment, there is no information about a newer version that...