Potential Price Slippage Due to Gaps in Consecutive Ranges

Lines of code Vulnerability details The method allows appending new Range instances without restrictions on the gap between the end of the last range and the start of the new one. Significant gaps between these ranges can result in considerable price slippages, introducing volatility in price...

engine Trust Management Gaps

Internet Reservation Module Booking Engine is a booking platform. A trust management issue vulnerability exists in IRM Next Generation booking engine, which arises from the use of HMAC tokens to authenticate requests, but these tokens are exposed in JavaScript files loaded by the client...

Internet Reservation Module Booking Engine Trust Management Issue Vulnerability

Internet Reservation Module Booking Engine is a reservation platform. A trust management issue vulnerability exists in Internet Reservation Module Booking Engine, which arises from the use of hard-coded API keys...

CVE-2023-38486 Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways

A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security controls which would normally prohibit unsigned kernel images from executing. An attacker can use this vulnerability to execute arbitrary...

hw: Intel: Unauthorized error injection in Intel SGX or Intel TDX

A flaw was found in hw. Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

Cryptocurrency Startup Loses Encryption Key for Electronic Wallet

The cryptocurrency fintech startup Prime Trust lost the encryption key to its hardware wallet--and the recovery key--and therefore $38.9 million. It is now in bankruptcy. I cant understand why anyone thinks these technologies are a good idea...

Results of Major Technical Investigations for Storm-0558 Key Acquisition

March 12, 2024 update As part of our continued commitment to transparency and trust outlined in Microsoft’s Secure Future Initiative, we are providing further information as it relates to our ongoing investigation. This new information does not change the customer guidance we previously shared, n...

Mozilla: Mozilla Mastodon Staging Instance Admin API Key Disclosure Through Slack

Admin Mastodon API keys were inadvertently disclosed in the trust-and-safety-eng channel on Mozilla's Slack workspace, potentially granting unauthorized access to the Mastodon server and compromising user data. Immediate action is required to mitigate this vulnerability...

3 Ways to Use Zero Trust to Reduce Cybercrime Risk in Healthcare

...

MAL-2023-8043 Malicious code in @grabdefence/trust-feature-bank-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfec11e2fa47a7b42d7e359d1dc08305ca989ded929ed38507f02f3d74df3a93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @grabdefence/trust-feature-bank-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfec11e2fa47a7b42d7e359d1dc08305ca989ded929ed38507f02f3d74df3a93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Super Store Finder Trust Management Issue Vulnerability

Super Store Finder is an easy to use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v3.6 that stems from the use of hard-coded passwords...

Apache NiFi Trust Management Issues Vulnerability

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A trust management issue vulnerability exists in Apache NiFi MiNiFi C++ versions 0.13 through 0.14, which stems from...

Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 信任管理问题漏洞

Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage and deploy settings for SEL power system equipment. A security...

SpotCam FHD 2 信任管理问题漏洞

SpotCam Sense is a camera from ChinaVision.com SpotCam. A trust management issue vulnerability exists in the SpotCam FHD 2 1.0036 firmware version, which stems from the use of hard-coded uBoot credentials, and can be exploited by an attacker to gain access to the system to perform arbitrary syste...

Elevating Data Security: Key Considerations When Transferring Your Digital Workspace

By Owais Sultan Data security is vital for protecting sensitive information and maintaining trust. This is a post from HackRead.com Read the original post: Elevating Data Security: Key Considerations When Transferring Your Digital Workspace...

sgxwallet 代码问题漏洞

Sgxwallet is an open source, high-performance hardware-secured crypto wallet based on Intel Sgx technology. A security vulnerability exists in skalenetwork sgxwallet v.1.9.0 and earlier versions that originated from a vulnerability that allows an attacker to cause a denial of service via the...

Apache Airflow Trust Management Issues Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has a trust management issue vulnerability that stems from...

Keylime 安全漏洞

Keylime is an open source extensible trust system for Keylime that utilizes TPM technology. A security vulnerability exists in Keylime that stems from a vulnerability that could allow bypassing the Poll Response Protocol during agent registration...

The vulnerability of Google Chrome browser’s Device Trust Connectors allows a perpetrator to execute arbitrary code.

The vulnerability of Google Chrome’s Device Connectors component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...