Malicious code in cdp-agentkit-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Phoenix Contact ILC PLCs Denial of Service (CVE-2021-33541)

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

FESTO CODESYS

GENERAL RECOMMENDATION As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits: - Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside - Use...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

CVE-2024-49417 affects Samsung Smart Touch Call prior to 1.0.0.8. The issue is caused by the use of an implicit intent for sensitive communications, which can allow a local attacker to launch privileged activities. User interaction is required to trigger the vulnerability. Documents consistently ...

PT-2024-29561 · Ibm · Ibm Cognos Controller

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by IBM Cognos Controller for inbound authentication, outbound communication to external...

ibexa/http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

GHSA-MGFG-7533-7JF6 ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

MAL-2024-11164 Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11180 Malicious code in tauri-plugin-autostart-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b142e694f8cc092c192ccd1c5256735955990e191b4b413415a7304ea45c582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11179 Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11175 Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11173 Malicious code in spinal-core-connectorjs_type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3451f756dd259cb0c2c30ea5f39c2d4a80eef529d40a35beafd582ce7d01420 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...