MAL-2025-27282 Malicious code in neptune-charon-cross-env-astrometry (npm)

The package neptune-charon-cross-env-astrometry was found to contain malicious code...

MAL-2025-25758 Malicious code in magellan-charon-vulcan-dependencies (npm)

The package magellan-charon-vulcan-dependencies was found to contain malicious code...

MAL-2025-16856 Malicious code in charon-resolvers-bootes-lyra (npm)

The package charon-resolvers-bootes-lyra was found to contain malicious code...

MAL-2025-39903 Malicious code in xo-grunt-publish-charon (npm)

The package xo-grunt-publish-charon was found to contain malicious code...

MAL-2025-37160 Malicious code in transhumanism-pyxis-astroinformatics-charon (npm)

The package transhumanism-pyxis-astroinformatics-charon was found to contain malicious code...

MAL-2025-24714 Malicious code in koa-holography-charon-blueshift (npm)

The package koa-holography-charon-blueshift was found to contain malicious code...

MAL-2025-15316 Malicious code in backend-eclipse-taurus-charon (npm)

The package backend-eclipse-taurus-charon was found to contain malicious code...

MAL-2025-16854 Malicious code in charon-enif-virgo-comet (npm)

The package charon-enif-virgo-comet was found to contain malicious code...

MAL-2025-29624 Malicious code in prettier-phylogenetics-charon-algol (npm)

The package prettier-phylogenetics-charon-algol was found to contain malicious code...

Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics

Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family called Charon to target the Middle East's public sector and aviation industry. The threat actor behind the activity, according to Trend Micro, exhibited tactics mirroring those of...

New Ransomware Charon Uses Earth Baxia APT Techniques To Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

📄 Schneider Electric EcoStruxure IT Data Center Expert 8.3 Privilege Escalation

Schneider Electric EcoStruxure IT Data Center Expert versions 8.3 and below contain a Charon executable that can be used by a low-privileged attacker to obtain root privileges. The Charon executable and configuration appears to be a local method for adding and removing services that run within th...

WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ch4r0n in WordPress Plugin GG Bought Together for WooCommerce versions = 1.0.2...

FreeBSD : strongswan -- buffer overflow (bbda3d16-968e-11ee-b780-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bbda3d16-968e-11ee-b780-b42e991fc52e advisory. - strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via...

DEBIAN-CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...

Buffer Overflow

strongswan is vulnerable to Buffer Overflow. The vulnerability is due to charon-tkm version of the charon IKE daemon doesn't properly check the length of received Diffie-Hellman public values before copying them to a fixed-size buffer on the stack. This potentially leads to a buffer overflow and...

FreeBSD : strongSwan -- vulnerability in charon-tkm (a62c0c50-8aa0-11ee-ac0d-00e0670f2660)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a62c0c50-8aa0-11ee-ac0d-00e0670f2660 advisory. - strongSwan reports: A vulnerability in charon-tkm related to processing DH public values was discover...

The vulnerability of the VPN package based on the IPSec protocol strongSwan is caused by a mistake in the charon-tkm process, allowing a hacker to execute arbitrary code.

The vulnerability of the VPN package based on the IPSec protocol and strongSwan is caused by a mistake in the charon-tkm process, where the Key Exchange Protocol IKE is implemented using the TKMv2 Trusted Key Manager. Exploiting this vulnerability allows an attacker operating remotely to execute...

SUSE-SU-2023:4529-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution bsc1216901...