Medium: libreswan

Issue Overview: The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically...

New "GoFetch" Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations. Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantage of a feature known as data memory-dependent...

MAL-2024-1062 Malicious code in unity-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7a62539b563d36148b212913759293a68090ffa3505239a01cd432698619c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Schema & Structured Data for WP & AMP < 1.27 - Contributor+ reCaptcha Key Update

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the 'saswpreviewsformrender' function, allowing authenticated attackers, with contributor access and above, to modify the plugin's stored reCaptcha site and secret keys, potentially...

MAL-2024-979 Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-825 Malicious code in wlwz-2312-7207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e03b89f00d3e74850b4aa597aaac1d4fd433aec8df364777de6ee808d8733c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-435 Malicious code in wlwz-2312-2904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abf31f43eaffed081933c46237f4c5e49600917ae2834e76dcae61633461f051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-256 Malicious code in wlwz-2312-0905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a70eea6a34b0619e5a279d41b9de833b894cc9597a73cda25dd30adda3c80fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-204 Malicious code in wlwz-2312-0307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23bfa6991a9b7eda642e64d8acd9eb603e2ada62e85098e39c3dd1a0f65f3282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-210 Malicious code in wlwz-2312-0404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e13a0a3eff0cece1235c716dc145c74c69b2a4ca17c5353f85879b231c176a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-46742 CubeFS leaks users key in logs

CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the logs in multiple components. When CubeCS creates new users, it leaks the users secret key. This could allow a lower-privileged user with access to th...

CVE-2023-27172

Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack...

CVE-2023-27172

Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack...

PT-2023-20989 · Xpand It · Xpand It Write-Back Manager

Name of the Vulnerable Software and Affected Versions: Xpand IT Write-back Manager version 2.3.1 Description: The issue is related to the use of weak secret keys to sign JWT tokens, allowing attackers to obtain the secret key via a bruteforce attack. Recommendations: For Xpand IT Write-back Manag...

MAL-2023-8539 Malicious code in mxtorie-prevname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b70247313e870c3116475090aea7e7f1e3ac45beb3584acbefc24750c09987b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

Input validation

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...