Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an exception not properly caught vulnerability in the communication framework. An...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an exception not properly caught vulnerability in the communication framework. Successf...

MAL-2023-1178 Malicious code in examplehu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a396a0983362fc4dd73d423e9d78bfa3ffd071a4d96133efb0e5cf1fb4e26523 The OpenSSF Package Analysis project identified 'examplehu' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability that can be exploited by an attacker to trigger post-release reuse when creating a WebRTC connection over HTTPS...

Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-34450 CometBFT PeerState JSON serialization deadlock

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...

How to Change NSIP of VPX Instance in SDX

Thisarticle explains how to modify the NSIP on a SDX VPX instance. Background User has already provisioned a VPX instance with NSIP on SDX and later decides to change the NSIP of the instance. To do this, the user had chosen “config ns” utility on instance and successfully modified and verified...

Omron SYSMAC Missing Authentication (CVE-2023-27396)

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

Malicious code in gitlab-glfm-markdown (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e04df4c0bb1f91ce34ee36e4731ee580ff1e7a1131cafd97a660d90f4c4cfb1 The OpenSSF Package Analysis project identified 'gitlab-glfm-markdown' @ 7.0.1 rubygems as malicious. It is considered malicious because: - The...

Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyjwtrequest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 048f93df54854431a2f36a8645a1966e5dca77f5effa1f5c9c20c21df6956423 The OpenSSF Package Analysis project identified 'pyjwtrequest' @ 1.0.4 pypi as malicious. It is considered malicious because: - The package...

SoftEtherVPN -- multiple vulnerabilities

Daiyuu Nobori reports: The SoftEther VPN project received a high level code review and technical assistance from Cisco Systems, Inc. of the United States from April to June 2023 to fix several vulnerabilities in the SoftEther VPN code. The risk of exploitation of any of the fixed vulnerabilities ...

CVE-2023-34656

An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges...

Code injection

An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges...

CVE-2023-34656

An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges...

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7539)

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause a denial of service...

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 Use of a Broken or Risky Cryptographic Algorithm (CVE-2018-7242)

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks. This plugin only works with...

Schneider Electric Modicon Out-of-bounds Write (CVE-2021-22788)

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X80 Ethernet Communication Modules:...

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7549)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause denial of HTTP and FTP...