Malicious code in ic-flow-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083c1a7beb41abdd8e33841c034133e42f802c4f7de64e47815c139f65023b0e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10581 Malicious code in ic-flow-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083c1a7beb41abdd8e33841c034133e42f802c4f7de64e47815c139f65023b0e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...

CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...

CVE-2024-49407

CVE-2024-49407 concerns Samsung Flow, with improper access control in versions prior to 4.9.15.7. The issue allows a physical attacker to access data across multiple user profiles on affected Samsung Flow deployments. The root cause is access control weakness that does not properly isolate user p...

CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...

CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.9.15.7, which stemmed from Samsung Flow containing an improper access...

kernel: netfilter: flowtable: initialise extack before use

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload...

kernel: netfilter: flowtable: initialise extack before use

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload...

PT-2024-33518 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.15.7 Description: The issue is related to improper access control, allowing physical attackers to access data across multiple user profiles. Recommendations: For versions prior to 4.9.15.7, update to version...

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the ruwanflow.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...

SUSE CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster...

OESA-2024-2329 botan2 security update

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

OESA-2024-2328 botan2 security update

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

Missing Authorization

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Missing Authorization due to improper authorization checks to verify flow ownership in uploadfile function in files.py file. To exploit this vulnerability, an attacker need...

CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster...

CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster...

CVE-2024-51406

CVE-2024-51406 affects Floodlight SDN OpenFlow Controller v1.2. The issue enables local hosts to craft fake LLDP packets, causing specific clusters to be missed by Floodlight and resulting in missed hosts both inside and outside the cluster. The vulnerability’s assessment in the provided sources ...