Malicious code in stedi-integrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b00a7c7aa40df7ec3808ab68391a9194f7441a10b24ce192d16f96277d4ba4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-balance-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d54ad3ccf5c32e9b01fe9f246e6c8136581e1e3420923ae2713221672e7279e6 The OpenSSF Package Analysis project identified 'wallet-balance-notifier' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8884 Malicious code in wallet-balance-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d54ad3ccf5c32e9b01fe9f246e6c8136581e1e3420923ae2713221672e7279e6 The OpenSSF Package Analysis project identified 'wallet-balance-notifier' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in rust-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in events_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd8e0d60317b9c1b711d6f1dcbf88073cf135c6a018bc578641d68f8bddb270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-46691

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

CVE-2024-46691

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

CVE-2024-46691 usb: typec: ucsi: Move unregister out of atomic section

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483

ESP-NOW replay attacks vulnerability in its implementation arises because the cache is shared for all message types (broadcast, unicast, ciphertext, plaintext) and is not differentiated by type. Affected: ESP-NOW component (ESP32/ESP-NOW protocol). Impact: attacker could clear legitimate entries ...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484

CVE-2024-42484 affects the ESP-NOW component, where the group-type message handling fails to validate the addrs_num field. This omission allows a crafted group message to be larger than the allocated buffer, causing memory corruption. The vulnerability is rooted in the mismatch between addrs_num ...

File Upload Vulnerability in Founder Mobile Editorial of Beijing Beifang Founder Electronics Co.

Beijing Founder Electronics Co., Ltd. is a leading provider of technology, products and services in the field of cross-media information communication. A file upload vulnerability exists in Founder Mobile Editorial of Beijing Founder Electronics Co., Ltd, which can be exploited by attackers to...

Siemens Industrial Product Null Pointer Dereference Vulnerability (CNVD-2024-38015)

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

Siemens Industrial Product Null Pointer Dereference Vulnerability

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

Fortinet FortiClient (All) - Lack of client-side certificate validation using SAML SSO (FG-IR-22-230)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-230 advisory. - An improper certificate validation vulnerability CWE-295 in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7,...