Malicious code in delphinus-flare-npm-charon (npm)

The package delphinus-flare-npm-charon was found to contain malicious code...

Malicious code in tailwindcss-charon-callisto-acamar (npm)

The package tailwindcss-charon-callisto-acamar was found to contain malicious code...

Malicious code in run-script-meissa-charon-sedna (npm)

The package run-script-meissa-charon-sedna was found to contain malicious code...

Malicious code in charon-blitz-socketio-nightwatch (npm)

The package charon-blitz-socketio-nightwatch was found to contain malicious code...

Malicious code in pyxis-charon-darkmatter-orogeny (npm)

The package pyxis-charon-darkmatter-orogeny was found to contain malicious code...

MAL-2025-31484 Malicious code in radioastronomy-charon-transform-archaeoastronomy (npm)

The package radioastronomy-charon-transform-archaeoastronomy was found to contain malicious code...

MAL-2025-39903 Malicious code in xo-grunt-publish-charon (npm)

The package xo-grunt-publish-charon was found to contain malicious code...

Malicious code in neptune-charon-cross-env-astrometry (npm)

The package neptune-charon-cross-env-astrometry was found to contain malicious code...

MAL-2025-22506 Malicious code in holography-charon-axios-development (npm)

The package holography-charon-axios-development was found to contain malicious code...

MAL-2025-30976 Malicious code in pyxis-charon-darkmatter-orogeny (npm)

The package pyxis-charon-darkmatter-orogeny was found to contain malicious code...

Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics

Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family called Charon to target the Middle East's public sector and aviation industry. The threat actor behind the activity, according to Trend Micro, exhibited tactics mirroring those of...

New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

New Ransomware Charon Uses Earth Baxia APT Techniques To Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

📄 Schneider Electric EcoStruxure IT Data Center Expert 8.3 Privilege Escalation

Schneider Electric EcoStruxure IT Data Center Expert versions 8.3 and below contain a Charon executable that can be used by a low-privileged attacker to obtain root privileges. The Charon executable and configuration appears to be a local method for adding and removing services that run within th...

WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ch4r0n in WordPress Plugin GG Bought Together for WooCommerce versions = 1.0.2...

FreeBSD : strongswan -- buffer overflow (bbda3d16-968e-11ee-b780-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bbda3d16-968e-11ee-b780-b42e991fc52e advisory. - strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via...

DEBIAN-CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...

Buffer Overflow

strongswan is vulnerable to Buffer Overflow. The vulnerability is due to charon-tkm version of the charon IKE daemon doesn't properly check the length of received Diffie-Hellman public values before copying them to a fixed-size buffer on the stack. This potentially leads to a buffer overflow and...

FreeBSD : strongSwan -- vulnerability in charon-tkm (a62c0c50-8aa0-11ee-ac0d-00e0670f2660)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a62c0c50-8aa0-11ee-ac0d-00e0670f2660 advisory. - strongSwan reports: A vulnerability in charon-tkm related to processing DH public values was discover...

The vulnerability of the VPN package based on the IPSec protocol strongSwan is caused by a mistake in the charon-tkm process, allowing a hacker to execute arbitrary code.

The vulnerability of the VPN package based on the IPSec protocol and strongSwan is caused by a mistake in the charon-tkm process, where the Key Exchange Protocol IKE is implemented using the TKMv2 Trusted Key Manager. Exploiting this vulnerability allows an attacker operating remotely to execute...