K25400442: TMM vulnerability CVE-2020-5931

Security Advisory Description Virtual servers with a OneConnect profile may incorrectly handle WebSockets related HTTP response headers, causing the Traffic Management Microkernel TMM to restart. CVE-2020-5931 Impact An attacker may be able to perform a denial-of-service DoS attack on a BIG-IP...

SUSE CVE-2010-3805

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving WebSockets. NOTE: this may overlap...

SUSE CVE-2010-4508

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification...

SUSE CVE-2010-4586

The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508...

SUSE CVE-2011-1449

Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

SUSE CVE-2012-4191

The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary...

SUSE CVE-2018-1000518

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

SUSE CVE-2019-13727

Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

SUSE CVE-2019-13729

Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2021-33880

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basicauthprotocolfactorycredentials=.... An attacker may be able to guess a password via a timing attack...

MAL-2023-2402 Malicious code in websockte-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 46dc95128425fd18d1e428f8e8140e1c77935e999dc5c03d669210faa3bb7e92 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2388 Malicious code in websocket-clientt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33cf4131351db40feeeab46a20ef29dbf2694a7cfbaf07b5927603a5dd8e4f03 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2367 Malicious code in webosckets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68af9ce1e4f8ec76a709adec4d60caf86c940be6875553277dfafc624d3c58ed Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2371 Malicious code in webscokets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 697162aceffd443ddb2712487da3d20b86eabee9c1ed1c747e7429bfb4debd16 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockeets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3684f6102d0addfd584997b5be2ba86d46d0dcd16759fce4e5c5126d14d282b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in wesbockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6a76e89bd6b156904abb89281100bf8f348a70e13830e81c7d3f907caa088eca Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2813cb2d126b4b82e555fa04b179b99f61fc6752e1a36ffce63c4585f6c5e1f6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2404 Malicious code in websockts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2813cb2d126b4b82e555fa04b179b99f61fc6752e1a36ffce63c4585f6c5e1f6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2376 Malicious code in websocets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 466292a81e99e2d203935987ab3f37b0175a12275894c97387eb075b71884c07 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2363 Malicious code in webbsockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bc99a017e9c45abecc352f0acf2293188b79ff2fe67f08f2a5a33fdb8cdac033 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...