Triangle Microworks TMW IEC 61850 安全漏洞

The SICAM 8 power automation platform is a universal, hardware and software based, all-in-one solution for all applications in the power sector. the SICAM A8000 RTUs Remote Terminal Units are modular devices for remote control and automation applications in all areas of energy supply. SICAM EGS...

CVE-2024-8779

The CVE-2024-8779 entry concerns OMFLOW by The SYSCOM Group, where access to system settings modification is not properly restricted. The vulnerability allows remote attackers with regular privileges to update system settings or create administrator accounts, potentially gaining full control of t...

Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vueoriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37d072267b4336c865f9892dd40672ccdaf4f2f336fc2fd304bd97f8eaed7c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-tempora-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d4b1d168bf71f91f6262c1c46d9722df779c8dd61ca554a9e142dcae0b2b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple TV Image Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apple TV Image Remote Control', 'Description' = %q This module will show an image on an AppleTV device for a period of time. Some AppleTV devices...

Chromecast YouTube Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chromecast YouTube Remote Control', 'Description' = %q This module acts as a simple remote control for Chromecast YouTube. Only the deprecated DI...

Amazon Fire TV YouTube Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Amazon Fire TV YouTube Remote Control', 'Description' = %q This module acts as a simple remote control for the Amazon Fire TV's YouTube app. Test...

Apple TV Video Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Apple TV Video Remote Control', 'Description' = %q This module plays a video on an AppleTV device. Note that AppleTV can be somewha...

Certification Vulnerabilities for Multiple SICAM Products Lacking Critical Functionality

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Siemens CPCI85 Central Processing和SICORE Base system 访问控制错误漏洞

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Malicious code in dimaspedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c763b10d1c1518d7a1b83655aa43d38243278e71daad1953955c08b1b93d095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in the Longse NVR that stems from transmitting a user's login and password to a remote control service without the use of any encryption, allowing an attacker to eavesdrop ...

PT-2024-36780 · Longse · Lbh30Fe200W +1

Name of the Vulnerable Software and Affected Versions: Longse NVR Network Video Recorder model NVR3608PGE2W Longse model LBH30FE200W cameras Description: The issue concerns the transmission of user login and password to a remote control service without encryption, allowing an on-path attacker to...

Malicious code in @zitterorg/adipisci-quae-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bfec270c90b3be9a92be8e18740b194c8100b3df718b92afe8d0aed6b22a916 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/enim-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c0e2f02fb7ceddf7a27341ffeefee6c938a5ee60c2df8f9903292feddcd4e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the application software interfaces of Session Smart Router and WAN Assurance, Session Smart Conductor, relates to bypassing the authentication process by using an alternative path or channel. This allows a perpetrator to gain full control over the device.

The vulnerability of the Application Programming Interface of routers like Session Smart Router and WAN Assurance, Session Smart Conductor, lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor,...

CVE-2024-5826 Remote Code Execution via Prompt Injection in vanna-ai/vanna

In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...

The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage lies in the possibility of writing beyond the buffer in memory, allowing attackers to bypass authentication procedures.

The vulnerability of microprogramming software in Schneider Electric Sage lighting and energy consumption remote control devices is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures by...

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage. This allows a perpetrator to upload arbitrary files and embedded software.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to the default access settings. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and embedded...