EUVD-2021-27306

Malware in sbrugna...

EUVD-2017-7414

Malware in sbrugna...

EUVD-2020-21338

Malware in sbrugna...

EUVD-2021-21338

Malware in sbrugna...

EUVD-2020-17919

Malware in sbrugna...

EUVD-2019-9342

Malware in sbrugna...

EUVD-2022-55357

Malicious code in bioql PyPI...

EUVD-2022-32620

Malicious code in bioql PyPI...

EUVD-2023-53258

Malicious code in bioql PyPI...

EUVD-2022-42631

Malicious code in bioql PyPI...

EUVD-2024-36125

Malicious code in bioql PyPI...

EUVD-2023-12404

Malicious code in bioql PyPI...

EUVD-2024-17995

Malicious code in bioql PyPI...

The vulnerability of the Lighttpd microprogramming software-based web server TRENDnet TN-200 allows a hacker to disclose protected information.

The vulnerability of the Lighttpd microprogramming software-based network storage server TRENDnet TN-200 is related to the use of a static key neV3rUseMe. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Linux Distros Unpatched Vulnerability : CVE-2024-43887

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/tcp: Disable TCP-AO static key after RCU grace period The lifetime of TCP-AO statickey ...

TOTOLINK N300RB Command Injection Vulnerability

The TOTOLINK N300R is a wireless router for home and small office scenarios from Korean networking brand TOTOLINK. The TOTOLINK N300RB suffers from a command injection vulnerability that originates from the remote support feature of static key protection, which can be exploited by an attacker to...

TOTOLINK N300RB 操作系统命令注入漏洞

The TOTOLINK N300R is a wireless router for home and small office scenarios from Korean networking brand TOTOLINK. The TOTOLINK N300RB suffers from a command injection vulnerability that originates from the remote support feature of static key protection, which can be exploited by an attacker to...

CVE-2022-50091 locking/csd_lock: Change csdlock_debug from early_param to __setup

In the Linux kernel, the following vulnerability has been resolved: locking/csdlock: Change csdlockdebug from earlyparam to setup The csdlockdebug kernel-boot parameter is parsed by the earlyparam function csdlockdebug. If set, csdlockdebug invokes staticbranchenable to enable csdlockwait feature...

CVE-2022-50012

CVE-2022-50012 affects the Linux kernel on 64-bit PowerPC (powerpc/64). The root cause is that jump_label_init() is invoked in setup_feature_keys() too late, since static keys may be used by subroutines of parse_early_param(), which itself is a subroutine of early_init_devtree(). The result is th...

CVE-2024-36496

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...