140 matches found
EUVD-2014-2937
Malware in sbrugna...
EUVD-2013-7129
Malware in sbrugna...
EUVD-2016-4488
Malware in sbrugna...
EUVD-2025-2414
Malicious code in bioql PyPI...
EUVD-2022-40979
Malicious code in bioql PyPI...
Malicious code in mydealer-configuration-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a6c72b4ebdfecd3ab01a485711a49a10423d88ba0231b62418227c458a78a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
(Pwn2Own) Phoenix Contact CHARX SEC-3150 Configuration Service Missing Authentication Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration service, which listens on TCP port 500...
(Pwn2Own) Phoenix Contact CHARX SEC-3150 DHCP Configuration Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration service, which listens on TCP port 50...
UBUNTU-CVE-2025-38132
In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt == 1...
CVE-2024-40893
Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...
CVE-2023-42797
A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05.20, CP-8050 MASTER MODULE All versions CPCI85 V05.20. The network configuration service of affected devices contains a flaw in the conversion of ipv4 addresses that could lead to an uninitialized variable being...
CVE-2023-0432
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system OS from the device in the context of the user "root." If the attacker has credentials for the web service, then the...
CVE-2025-21349
Windows Remote Desktop Configuration Service Tampering Vulnerability...
CVE-2025-21349
Windows Remote Desktop Configuration Service Tampering Vulnerability...
CVE-2025-21349
Windows Remote Desktop Configuration Service Tampering Vulnerability...
CVE-2025-21349 Windows Remote Desktop Configuration Service Tampering Vulnerability
...
CVE-2025-21349
CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...
Windows Remote Desktop Configuration Service Tampering Vulnerability
...
PT-2025-6307 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A tampering issue affects the Windows Remote Desktop Configuration Service, allowing attackers to impact the system. Recommendations: For versions prior to the fixed version, update to...
