12970 matches found
CVE-2024-41927
The CVE-2024-41927 entry covers a cleartext transmission of sensitive information in multiple IDEC PLCs (CWE-319). Affected products include IDEC’s FC6A/FC6B MICROSmart modules (various firmware versions) and FT1A/FT1B lines, with specific version ceilings noted in vendor advisories. The root cau...
CVE-2024-45616
A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response AP...
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
A flaw was found in the Linux kernel’s IPC system. This flaw allows an attacker to use a specially crafted program to cause a rare race condition, leading to a denial of service...
Malicious code in mhnumjp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf The OpenSSF Package Analysis project identified 'mhnumjp' @ 1.999.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-8707 Malicious code in mhnumjp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf The OpenSSF Package Analysis project identified 'mhnumjp' @ 1.999.1 npm as malicious. It is considered malicious because: - The package...
PT-2024-26060 · Google · Android
Name of the Vulnerable Software and Affected Versions: FeliCaTest versions prior to SMR Sep-2024 Release 1 Description: The issue allows local attackers to enable NFC configuration due to improper export of Android application components. Recommendations: For versions prior to SMR Sep-2024 Releas...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33050 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
CVE-2024-33050 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
CVE-2024-33045
CVE-2024-33045 involves memory corruption in the Qualcomm ADSP/BTFM pathway when the BTFM client sends new messages over Slimbus. The root cause, as detailed in connected documents, relates to improper handling of a local completion variable (done) in the Slimbus transfer paths (qcom slim ngd xfe...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a post-release reuse issue contained in a Qualcomm IPC component...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an out-of-bounds read issue contained in the WLAN Host Communication component...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an out-of-bounds read issue contained in the WLAN Host Communication component...
Allen-Bradley's Legacy Protocol (PCCC) Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "DoS Exploitation of Allen-Bradley's Legacy Protocol PCCC", 'Description' = %q A remote, unauthenticated attacker could send a single, specially...
JVN#29238389: IPCOM vulnerable to information disclosure
SSL Accelerator/SSL-VPN Function of IPCOM provided by Fsas Technologies Inc. contains an information disclosure vulnerability due to observable timing discrepancy CWE-208. Impact Some of the encrypted communication may be decrypted by an attacker who can obtain the contents of the communication...
Rockwell Automation Micro850/870 Denial of Service Vulnerability
Rockwell Automation Micro850/870 is a programmable logic controller from Rockwell Automation. A denial of service vulnerability exists in Rockwell Automation Micro850/870 v20.011, which can be exploited by an attacker to cause CIP/Modbus communication to be interrupted for a short period of time...
Fuzzing µCOS protocol stacks, Part 2: Handling multiple requests per test case
So far in this series, Ive developed a fuzzer for the µC/HTTP-server. As described in the previous post, this fuzzer reads from a file to enable compatibility with AFL++. That implementation only fuzzes a single request at a time. Although that single request fuzzer uncovered a few security...
CVE-2024-7269
Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...
CVE-2024-7269 Stored XSS in ConnX ESP HR Management
Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...