quic-go data manipulation vulnerability

quic-go is an implementation of the QUIC protocol, RFC 9000 protocol in Go by Lucas Clemente, a personal developer. A data forgery issue vulnerability exists in versions of quic-go prior to v0.48.1, which stems from the mishandling of ICMP Packet Too Large messages, and could allow an out-of-path...

Red Hat Ceph Storage data fabrication vulnerability

Red Hat Ceph Storage is a suite of scalable, open software-defined storage platforms from Red Hat USA. A data forgery issue vulnerability exists in Red Hat Ceph Storage that stems from the presence of an authentication bypass...

Galaxy Software Services iota C.ai Conversational Platform Data Forgery Vulnerability

Galaxy Software Services iota C.ai Conversational Platform is an intelligent AI conversational platform from Galaxy Software Services China. A data forgery vulnerability exists in Galaxy Software Services iota C.ai Conversational Platform versions 1.0.0 through 2.1.3, which stems from an improper...

ONEKEY Platform data falsification vulnerability

ONEKEY Platform is an application of ONEKEY. A data forgery issue vulnerability exists in ONEKEY Platform, which stems from peer-to-peer authentication being disabled everywhere, allowing a remote unauthenticated user to execute arbitrary commands with elevated privileges on an affected device...

Visteon Infotainment data falsification vulnerability

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a data forgery vulnerability that arises from insufficient authenticity verification of the firmware image provided during firmware updates to the VIP microcontroller, which could...

Fortinet FortiClient Data Forgery Issue Vulnerability (CNVD-2024-49647)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. The Fortinet FortiClient is vulnerable to a data forgery...

Fortinet FortiClient data forgery vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. The Fortinet FortiClient is vulnerable to a data forgery...

Laravel Reverb data manipulation vulnerability

Laravel Reverb is an open source library for The Laravel Framework. It brings real-time WebSocket communication to Laravel applications. A data forgery issue vulnerability exists in Laravel Reverb versions prior to 1.4.0, which stems from a failure to validate the authentication signature of...

ABB’s various products have vulnerabilities related to data falsification.

ABB Relion Protection Relays and others are products of ABB Switzerland.ABB Relion Protection Relays are a compact, multifunctional solution for utility and industrial power distribution systems.ABB REX610 is a flexibly configurable all-in-one protection relay.ABB REX615 is ABB REX615 is a flexib...

Schneider Electric Data Center Expert: Data falsification issue vulnerabilities

Schneider Electric Data Center Expert is a data monitoring software from Schneider Electric USA. A data forgery issue vulnerability exists in Schneider Electric Data Center Expert version 8.1.1.3 and prior versions, which stems from improper cryptographic signature validation, and could compromis...

Gradio data falsification vulnerability

Gradio, an open source Python library open sourced by Hugging Face, is a method for demonstrating machine learning models through a friendly web interface. Gradio suffers from a Data Forgery Problem vulnerability that stems from the fact that if an attacker gains access to the remote URL where th...

SSOReady data manipulation vulnerability

SSOReady is an open source development tool for enterprise SSO from SSOReady Open Source. A data forgery vulnerability exists in SSOReady, which stems from the vulnerability of the affected version to XML signature bypass attacks...

Meshtastic device firmware data manipulation vulnerability

Meshtastic device firmware is a Meshtastic open source firmware for Meshtastic devices running open source, off-grid, decentralized mesh networks. A data forgery vulnerability exists in Meshtastic versions prior to 2.5.1, which stems from the remote hardware module not checking if a received remo...

GoTenna Pro data falsification vulnerability

The goTenna Pro is a series of devices from goTenna that can create networks for off-grid communications and situational awareness. A data forgery vulnerability exists in the goTenna Pro that arises from the use of AES CTR mode for short encrypted messages without any additional integrity checkin...

GoTenna Pro ATAK Plugin: Data Forgery Vulnerability

The goTenna Pro ATAK Plugin is a plugin for goTenna's device that creates networks for off-grid communications and situational awareness. A Data Forgery Issue vulnerability exists in goTenna Pro ATAK Plugin version 1.9.12 and earlier, which arises from the use of AES CTR mode encryption of short...

Red Hat Keycloak data forgery vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A Data Forgery Issue vulnerability exists in Red Hat Keycloak versions prior to 25.0.6, which stems from a flaw in the SAML signature validatio...

WhatsApp-API-JS data manipulation vulnerability

whatsapp-api-js is a TypeScript server-agnostic official API framework for Whatsapp by Tomás Raiti Personal Developer. A data forgery issue vulnerability exists in versions of whatsapp-api-js prior to 4.0.3, which stems from incorrectly returning false for a valid signature when using the...

Ruby SAML data forgeing vulnerability

Ruby SAML is an open source implementation of a SAML authorization client from SAML-Toolkits. A data forgery vulnerability exists in Ruby SAML that stems from Ruby-SAML's inability to properly verify the signature of a SAML response, allowing an attacker to log in to a vulnerable system as an...

Microsoft Office data falsification vulnerability

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

Microsoft Office data falsification vulnerability

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...