TP-LINK TL-WR941ND 安全漏洞

The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Routers, which stems from a buffer overflow vulnerability in the radiusSecret parameter. Affected products and versions: TP-Link WR841N V8 version, TL-WR940N V2 version, TL-WR941ND V5...

CVE-2023-40171

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

Design/Logic Flaw

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

CVE-2023-40171

CVE-2023-40171 affects the Dispatch open‑source security incident management tool. The server response includes the JWT secret used to sign tokens in errors raised by the Dispatch Plugin - Basic Authentication Provider, enabling an attacker to craft valid JWTs and potentially take over any accoun...

CVE-2023-40171 Dispatch writes JWT tokens in error message

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

CVE-2023-40171 Dispatch writes JWT tokens in error message

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

CLSA-2023-1692295113 gnutls: Fix of CVE-2023-0361

CVE-2023-0361: Remove branching on secret data to avoid timing sidechannel...

CLSA-2023-1692294262 gnutls: Fix of CVE-2023-0361

CVE-2023-0361: Remove branching on secret data to avoid timing sidechannel...

PT-2023-27303 · Dispatch · Dispatch Plugin - Basic Authentication Provider +1

Name of the Vulnerable Software and Affected Versions: Dispatch versions prior to 20230817 Description: Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic...

Malicious code in hh-dep-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac7b27f86bac41db082963b72360f1c159fa5ecbaf4a72d766ae92548df697f3 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-1477 Malicious code in miro-api-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 787331785bd7ba05994172e4c86d95681d3e2e53caf8660a6832eed760fbfb68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1ds-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc8c09b58037e1261454fe703ffc7c5929254eb97c02e35c1b5d495061d192df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in square-apple-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9fccff4670e174a264245cd74f260281cf3cbd751f4a24bb9516c4b1038a35d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1468 Malicious code in ynf-dx-webpack-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff33ef0f3340901bb0ce287a8b87f098654546d5b5883805533e7581670f64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1457 Malicious code in cloud-room-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7995bf141e79ead6fc8464a011cc856eb05c0c23ba1855b002b45a7e60002c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ynf-dx-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dfe1e0b8085faef3ed0105448c3cc1d7f7bba72ab13023a2eb5ba38827da39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hsqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6af02b8a41a1ba2a2897c59a9bfe66780bc83afc705127d53c22c2d463c74bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

user_oidc app stores client secret unencrypted in database

None...

Malicious code in exp-core-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31032b8597c788373193761b90d13ba7f409a33d3a75f62a7ee5ba4e4ff9804e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1443 Malicious code in tra-arifvauchat-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3e26d506f8d993fdc138822a2091a052075e901565d28616ce4c2deebcd6adc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...