openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator

A flaw was found in the IPMI simulator ipmisim component of OpenIPMI. Due to a missing check in the authorization type on incoming LAN messages, an attacker may be able to trigger a denial of service...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : OpenIPMI (SUSE-SU-2024:3604-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3604-1 advisory. - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulato...

Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9150 Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in get-new-script-viking-simulator-script-apo06a

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in code-script-new-viking-simulator-script-hm9gi2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in get-new-script-roblox-fishing-simulator-script-x5c6h7

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

AZL-50318 CVE-2024-42934 affecting package OpenIPMI for versions less than 2.0.36-1

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

UBUNTU-CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

searchstax-simulator-crawler (>=0.0.1a22, <=0.0.1a23) potentially affected by CVE-2024-45231 via django (1.8.13)

django PYPI version 1.8.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - searchstax-simulator-crawler =0.0.1a22, =0.0.1a23 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

SUSE-SU-2024:3505-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. bsc1229910...

MAL-2024-8754 Malicious code in car_mechanic_simulator_2014_torent_tpb_install__xwd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4125e66178d5447a89863cbb772759ba1c2fd516d19dbc7994ad687424c9b8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

A flaw was found in the IPMI simulator ipmisim component of OpenIPMI. Due to a missing check in the authorization type on incoming LAN messages, an attacker may be able to trigger a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options ...

Fuji Electric Tellus Lite V-Simulator Buffer Overflow

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Fuji Electric Tellus Lite V-Simulator Buffer Overflow

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...