40 matches found
Malicious code in @zalastax/nolb-frn (npm)
The package @zalastax/nolb-frn was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-73144
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...
UBUNTU-CVE-2026-73144
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...
CVE-2026-73144
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...
CVE-2026-73144
A flaw was found in svxlink's FRN module. A server-supplied list item count is accepted without validation, allowing a malicious server to trigger unbounded memory allocation. This can lead to memory exhaustion and a denial of service. Mitigation Update svxlink to version 26.05.1 or later...
PT-2026-80180
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...
MAL-2025-11493 Malicious code in @zalastax/nolb-frn (npm)
The package @zalastax/nolb-frn was found to contain malicious code...
Malicious code in @zalastax/nolb-frn (npm)
The package @zalastax/nolb-frn was found to contain malicious code...
MAL-2022-3213 Malicious code in frn-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in frn-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in frn-api-client
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12088)
An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one...
Rockwell Automation Allen-Bradley PowerMonitor 1000 Improper Neutralization of Input During Web Page Generation (CVE-2018-19615)
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted user's web browser to gain access to the affected device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Rockwell Automation Allen-Bradley Stratix 5950
1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley Stratix 5950 Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write a...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service
Binary data 720100.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service
Binary data 720099.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Authentication Bypass
Binary data 720101.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service
Binary data 720098.prm...
ICSA-19-120-01_Rockwell Automation CompactLogix 5370
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: CompactLogix 5370 Vulnerabilities: Uncontrolled Resource Consumption, Stack-based Buffer Overflow 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to...
PT-2018-5345
Name of the Vulnerable Software and Affected Versions Allen Bradley Micrologix 1400 Series B FRN versions 21.2 and before Description A file write issue exists in the memory module functionality, allowing a specially crafted packet to cause a file write, resulting in a new program being written t...