MAL-2024-8684 Malicious code in @diotoborg/vero-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fb2e8e4a6349f91a258ae73ba115417262626ce8cbaea20f02605963832fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestias-ab-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b27e9f1b9a470c4d3602228bf019eed81a341fa5f7d59c60c35e547fe0d8238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8433 Malicious code in @diotoborg/molestias-ab-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b27e9f1b9a470c4d3602228bf019eed81a341fa5f7d59c60c35e547fe0d8238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ab-facere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c6e41bf971342b9e0009cc5ffb3ff11bfdb96ecf12030234a6d1380644ddac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ewon Cosy+ Improper Neutralization / Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-016 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Improper Neutralization of Input During We...

Ewon Cosy+ Hardcoded Key

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-032 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-32...

CVE-2024-42274

CVE-2024-42274 affects the Linux kernel’s ALSA firewire-lib. Reverting commit 7ba5ca32fe6e caused by removing the process-context workqueue from amdtp_domain_stream_pcm_pointer() and update_pcm_pointers() introduced AB/BA deadlock competition for the substream lock, potentially freezing systems u...

PT-2024-27511 · Ab Initio · Ab Initio Authorization Gateway +1

Name of the Vulnerable Software and Affected Versions: Ab Initio Metadata Hub and Authorization Gateway versions prior to 4.3.1.1 Description: An issue in the import host feature allows attackers to run arbitrary code via crafted modification of server configuration. Recommendations: For versions...

Ab Initio Metadata Hub和Ab Initio Authorization Gateway 安全漏洞

Ab Initio Metadata Hub and Ab Initio Authorization Gateway are both products of Ab Initio, Inc. of the U.S. Ab Initio Metadata Hub is a metadata system.Ab Initio Authorization Gateway is an authorization gateway. A security vulnerability exists in Ab Initio Metadata Hub and Ab Initio Authorizatio...

CVE-2024-37382

Affected products: Ab Initio Metadata Hub and Ab Initio Authorization Gateway, prior to version 4.3.1.1. Root cause: in the import host feature, crafted server configuration changes allow remote code execution. Impact: arbitrary code execution with high confidentiality, integrity, and availabilit...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

Malicious code in @zitterorg/itaque-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 217d8db03885fbfc16379716c8fca9f21d84d523ae2d286a665e4b804be53883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7243 Malicious code in @zitterorg/itaque-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 217d8db03885fbfc16379716c8fca9f21d84d523ae2d286a665e4b804be53883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ab-fugiat-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d432bd9ce4ff557027d8683e72756af43e8b5ee86165974fa36e7991bced1ecc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ab-panel (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6319 Malicious code in ab-panel (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4129

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

CVE-2024-4129

The provided data confirms CVE-2024-4129: Snow Software AB Snow License Manager for Windows (versions 9.33.2–9.34.0) contains an Improper Authentication flaw that allows a network attacker to bypass authentication when Active Directory Authentication is enabled. Affected component/condition: Snow...

Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...