MAL-2024-2215 Malicious code in down_load_ebook_the_forever_home_by_sue_watson_ahk17 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1719 Malicious code in accion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-love (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1706 Malicious code in 7.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 7.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1701 Malicious code in 4.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1696 Malicious code in -whareo-to-watch-john-wick-chapter-4-omare-fullmovies-hd-online-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-22168 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps

A Cross-Site Scripting XSS vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found which could allow an attacker to redirect the user to a crafted domain and reset their credentials, or to execute arbitrary client-side code in the user’s browser session to carry...

Multiple Western Digital Products Cross-Site Scripting Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in multiple Western Digital products that stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to redirect a user to a crafted domain and...

PT-2024-4675 · Huawei · Huawei Ws7206-10 +3

Name of the Vulnerable Software and Affected Versions: Huawei home routers affected versions not specified Huawei TC7001-10, WS7200-10, and WS7206-10 affected versions not specified Description: The issue is related to a connection hijacking vulnerability in some Huawei home routers. This...

Security Advisory - Connection Hijacking Vulnerability in Some Huawei Home Routers

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.Vulnerability ID:HWPSIRT-2023-76605 This vulnerability has been assigned a CVEID:CVE-2023-7266...

CVE-2024-6108

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

CVE-2024-6108 Genexis Tilgin Home Gateway Login cross site scripting

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

CVE-2024-6108 Genexis Tilgin Home Gateway Login cross site scripting

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

CVE-2024-6108

CVE-2024-6108 affects Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. The issue is in the Login component, where the parameter and/or errmsg in /vood/cgi-bin/vood_view.cgi?act=index&lang=EN# is manipulated, leading to basic cross-site scripting. This can be triggered remotely. The available s...

Malvertising Campaign Leads to Execution of Oyster Backdoor

The following analysts contributed to this blog: Thomas Elkins, Daniel Thiede, Josh Lockwood, Tyler McGraw, and Sasha Kovalev. Executive Summary Rapid7 has observed a recent malvertising campaign that lures users into downloading malicious installers for popular software such as Google Chrome and...

Schneider Electric EVlink Home Smart Security Vulnerability

The Schneider Electric EVlink Home Smart is a smart home electric vehicle charger from Schneider Electric France. A security vulnerability exists in Schneider Electric EVlink Home Smart version v2.0.4.1.2131 and v2.0.3.8.2128, which stems from the presence of a Resource Error Domain vulnerability...

What Data Does Veeam Kasten for Kubernetes Include in the Phone Home Reports

Purpose This article documents what data is included in the phone home reports sent by Veeam Kasten for Kubernetes. Solution The data is divided into the following sections Basic Data Infrastructure Data Run Time Data for Billing Purposes Additional Metrics Profiles Artifact Metrics Basic Data...

ABB KNX Security Vulnerability

ABB KNX is a smart home and building automation system from ABB Switzerland. ABB KNX has a security vulnerability that stems from the presence of an FDSK leak and replay attack...

RHEL 5 : libuser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Security...

PT-2024-40394 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 4.6.x and higher Description: The issue arises when the configuration option config.prefixLocalAnchors is used with the values "all" or "cached" in a TYPO3 installation. This can lead to caching of request URLs with arbitrary...