Malicious code in hazmat-cfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670ac0a193b6b9a6afb01457c68700468026e76943f07cdf100d2d85601be2b3 lib/report.js reads local files fs.readFileSync at lines 31 and 72, collects host and account identifiers via os.hostname and os.userInfo lines 160,...

Malicious Package

Overview hazmat-cfr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11465 Malicious code in hazmat-cfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670ac0a193b6b9a6afb01457c68700468026e76943f07cdf100d2d85601be2b3 lib/report.js reads local files fs.readFileSync at lines 31 and 72, collects host and account identifiers via os.hostname and os.userInfo lines 160,...

MINI-2CFR-M63R-XVXQ

Bulletin has no description...

EUVD-2023-32211

Malicious code in bioql PyPI...

CVE-2023-28541

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

Fedora: Security Advisory for CFR (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: CFR-0.151-16.fc40

CFR will decompile modern Java features - including much of Java 9, 12 & 14, but is written entirely in Java 6, so will work anywhere! It'll even make a decent go of turning class files from other JVM languages b ack into java!...

Hardcoded credentials

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...

CVE-2023-47674

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB...

CVE-2023-28541

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

Memory corruption

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541 Buffer Over-read in WLAN Host

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541 Buffer Over-read in WLAN Host

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541

CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...

PT-2023-21789 · Unknown · Data Modem

Name of the Vulnerable Software and Affected Versions: Data Modem affected versions not specified Description: The issue is related to memory corruption in the Data Modem when processing a DMA buffer release event concerning CFR data. Recommendations: At the moment, there is no information about ...

CVE-2023-28541: Buffer Over-read

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

DSA-5041-1 cfrpki - security update

Bulletin has no description...

NERC CIP Compliance in Azure vs. Azure Government cloud

As discussed in my last blog post on North American Electric Reliability Corporation—Critical Infrastructure Protection NERC CIP Compliance in Azure, U.S. and Canadian utilities are now free to benefit from cloud computing in Azure for many NERC CIP workloads. Machine learning, multiple data...

Recaf - A Modern Java Bytecode Editor

Recaf is an open-source Java bytecode editor built on top of Objectweb's ASM. ASM is a bytecode manipulation library that abstracts away the constant pool and a few other class-file attributes. Since keeping track of the constant pool and managing proper stackframes are no longer necessary, compl...