Authentication flaw

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

Hardcoded credentials

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-34151

CVE-2022-34151 affects Omron NJ/NX-series Machine Automation Controllers, Sysmac Studio, and NA-series PTs. Root cause: hard-coded credentials in affected components may let a remote attacker obtain credentials and access the controller. Affected versions: NJ/NX controllers (NJ1/NJ series up to v...

CVE-2022-33971

CVE-2022-33971 affects Omron NJ/NX-series Machine Automation Controllers. An adjacent attacker who can analyze the communication between the controller and internal software may bypass authentication via capture-replay, potentially causing a DoS or enabling execution of a malicious program. Affec...

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

CVE-2022-33208

CVE-2022-33208 is an authentication bypass by capture-replay affecting Omron NJ/NX-series Machine Automation Controllers (NJ 1.48 and earlier; NX7 1.28 and earlier; NX1 1.48 and earlier), Sysmac Studio (≤1.49), and NA-series PT runtimes (NA5-15W/12W/9W/7W ≤1.15). A remote attacker who can analyze...

USN-5499-1: curl vulnerabilities

Florian Kohnhuser discovered that curl incorrectly handled returning a TLS server’s certificate chain details. A remote attacker could possibly use this issue to cause curl to stop responding, resulting in a denial of service. CVE-2022-27781 Harry Sintonen discovered that curl incorrectly handled...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

Omron SYSMAC CS/CJ/CP Series 和 NJ/NX Series 数据伪造问题漏洞

Omron SYSMAC CS/CJ/CP Series and Omron SYSMAC NJ/NX Series are products of Omron Corporation, Japan.Omron SYSMAC CS/CJ/CP Series is a series of programmable controllers.Omron SYSMAC NJ/NX Series is a series of machine automation controllers. Omron SYSMAC NJ/NX Series is a series of machine...

USN-5495-1: curl vulnerabilities

Harry Sintonen discovered that curl incorrectly handled certain cookies. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 21.10, and Ubuntu 22.04 LTS. CVE-2022-32205 Harry Sintonen discovered that curl incorrectly handled certain HTTP...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain access to modify, add, or delete data, or cause the system to crash or fail in rare cases.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause the system to freeze or, in rare cases, crash...

AAmiles 安全漏洞

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

In today’s evolving threat landscape, email represents the primary attack vector for cybercrime, making effective email protection a key component of any security strategy.1 In Q1 2022, Microsoft participated in an evaluation of email security solutions, carried out by SE labs—a testing lab focus...

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

In today’s evolving threat landscape, email represents the primary attack vector for cybercrime, making effective email protection a key component of any security strategy.1 In Q1 2022, Microsoft participated in an evaluation of email security solutions, carried out by SE labs—a testing lab focus...

Cisco ASA-X with FirePOWER Services Authenticated Command Injection

This module exploits an authenticated command injection vulnerability affecting Cisco ASA-X with FirePOWER Services. This exploit is executed through the ASA's ASDM web server and lands in the FirePower Services SFR module's Linux virtual machine as the root user. Access to the virtual machine...

Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wordpress-element (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ecc824a1e4a6272bd98835ef5b63a12da07f46574ff97377c2e3f3d605070c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdcustom-breakpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 800bd964dde71fdd866122fcdcfea36706a4a97ef2826bbb6443226f78ccac19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brandtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1290fce7617d2cd9677c80ca5c34bdf4a66d8b1cd5a72a5578f15becbd4fbcc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...