Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2023/07/11 3:05 a.m.•6 views

Malware in fca-tpk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/11 3:05 a.m.•16 views

Malicious code in fca-tpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 576e118459e6170d7b00062ae693815b18ed8bd83e6c8fc7337143b842bf6c74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/02/27 5:48 a.m.•19 views

MAL-2023-899 Malicious code in tpk-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 647a1daab227c3356bfb3368fd4209900a6e742233d3d7db96f36f2f8fde1275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/02/27 5:48 a.m.•6 views

Malware in fca-tpk-vip

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2023/02/27 5:48 a.m.•23 views

MAL-2023-425 Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/02/27 5:48 a.m.•18 views

Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/02/27 5:48 a.m.•20 views

Malicious code in tpk-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 647a1daab227c3356bfb3368fd4209900a6e742233d3d7db96f36f2f8fde1275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/02/27 5:48 a.m.•7 views

Malware in tpk-fca

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2017/10/18 12:00 a.m.•57 views

Fedora 25 : 1:wpa_supplicant (2017-12e76e8364) (KRACK)

Fix the for the Key Reinstallation Attacks ========================================== - hostapd: Avoid key reinstallation in FT handshake CVE-2017-13082 - Fix PTK rekeying to generate a new ANonce - Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK...

8.1CVSS7.2AI score0.04575EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2017/10/17 1:00 p.m.•98 views

CVE-2017-13086

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Tunneled Direct-Link Setup TDLS Peer Key TPK during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

7.2AI score0.02046EPSS
SaveExploits0References21
CVE
CVE
•added 2017/10/17 1:00 p.m.•281 views

CVE-2017-13086

CVE-2017-13086 affects WPA/WPA2, specifically the TDLS handshake where the TDLS PeerKey (TPK) can be reinstalled. The root cause is key reinstallation during the TDLS handshake, enabling an attacker within radio range to replay, decrypt, or spoof frames. This vulnerability is documented across mu...

6.8CVSS7.2AI score0.02046EPSS
SaveExploits0References21Affected Software6
Mend
Mend
•added 2017/10/17 1:00 p.m.•8 views

CVE-2017-13086

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Tunneled Direct-Link Setup TDLS Peer Key TPK during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

7.6CVSS0.02046EPSS
SaveExploits0References23
Rows per page
Query Builder