MAL-2024-12154 Malicious code in onyx-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8be30b3e9e3e3e0c2d877dd6ab516a128433859782e8b798a2f9f095662ca6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onyx-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8be30b3e9e3e3e0c2d877dd6ab516a128433859782e8b798a2f9f095662ca6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-onyx-ui-base (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11348 Malicious code in eslint-config-onyx-ui-base (npm)

--- -= Per source details. Do not edit below this line.=-...

Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs

Fantastic video of a female Gonatus onyx squid swimming while carrying her egg sack. An earlier related post. Blog moderation policy...

NVIDIA Onyx Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NVIDIA Onyx switches. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /admin/launch endpoint. When parsing the script query parameter, the...

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Three different organizations in the U.S. were targeted in August 2024 by a North Korean state-sponsored threat actor called Andariel as part of a likely financially motivated attack. "While the attackers didn't succeed in deploying ransomware on the networks of any of the organizations affected,...

CVE-2024-0113

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure...

CVE-2024-0113

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure...

CVE-2024-0113

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure...

PT-2024-15350 · Nvidia · Onyx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC affected versions not specified Description: The vulnerable software contains a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. ...

CVE-2024-0104

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges...

CVE-2024-0104

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC are affected by CVE-2024-0104 due to a vulnerability in the LDAP AAA component that can lead to information disclosure, data tampering, and privilege escalation. The issue is described across multiple sources (NVD, Red Hat, CVE lists) as ...

CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0101

CVE-2024-0101 affects NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC. Root cause: improper ipfilter definitions in the switch software, per the CVE description. Impact: potential denial of service through attacker actions targeting the switch. Exploitation details are not provided in ...

CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service...

PT-2024-15345 · Nvidia · Nvidia Mellanox Os +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Mellanox OS affected versions not specified ONYX affected versions not specified Skyway affected versions not specified MetroX-2 affected versions not specified MetroX-3 XC affected versions not specified Description: The issue is...

NVIDIA多款产品 安全漏洞

NVIDIA Mellanox OS and others are products of NVIDIA Corporation.NVIDIA Mellanox OS is a switch software.NVIDIA ONYX is an extremely flexible and scalable Ethernet-based switch operating system.NVIDIA Skyway is a gateway system. A security vulnerability exists in several NVIDIA products that stem...