Hazardous Method or Function Vulnerability Exposed by Siemens SINEC Traffic Analyzer

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer has an exposed dangerous method or...

Siemens TIM 1531 IRC Digit Type Error Conversion Vulnerability

The TIM 1531 IRC is a communication module for SIMATIC S7-1500, S7-400, S7-300. The Siemens TIM 1531 IRC suffers from a number type miscommunication vulnerability that can be exploited by an attacker to cause a denial of service condition on an affected device...

Creating Secure CRM Pipelines in Construction: Best Practices and Essential Strategies

Secure your construction company's CRM pipeline to protect client data and streamline operations. A specialized CRM enhances communication, reduces errors, and supports scalable growth with advanced security features and automation tools...

CVE-2024-2462

Allow attackers to intercept or falsify data exchanges between the client and the server...

Malicious code in ct-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e783edf3831848aac61070e6d4fcd03fb9023946d4c766f49e7d35b0403baa6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1565 Malicious code in aws-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b192498364ed7190f44f00a98983087f969407bd217eadfed1c6353335eda7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 40 Update: podman-tui-1.1.0-1.fc40

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

MAL-2024-1564 Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30bda5bff5f57af1051023ce71acba6b09efbaa75367bd8a05831377244491c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1561 Malicious code in rb-payment-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb4113e8b820d0f3ed35205bfc6b682ce6bb937db31002b79c44bb723908e18 The OpenSSF Package Analysis project identified 'rb-payment-wallet' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1617 Malicious code in test-pkg-blabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83b007683c452075ec2dfb23b7de20d38b8d28441ce63b4745fd114bba008a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1559 Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-1558 Malicious code in cosma-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49388262dd0b3d40b1f426a488f94937d409f2ce2053702f81a099fa8ed3b3c2 The OpenSSF Package Analysis project identified 'cosma-ui-icons' @ 9999.999.3 npm as malicious. It is considered malicious because: - The packag...

Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1551 Malicious code in integration-web-core--socle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bee6dc4af217ab7789d50b0fed6b7d01749bf9ef8c725c1dfee59c068f9af3b The OpenSSF Package Analysis project identified 'integration-web-core--socle' @ 1.4.2 npm as malicious. It is considered malicious because: - Th...

Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for qt6-qtremoteobjects (FEDORA-2024-bfb8617ba3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-1543 Malicious code in ing-shared-navigation-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f93af2ce71593d4858563cf9cb0ae31150636aef60cad09f5ad639edda6194 The OpenSSF Package Analysis project identified 'ing-shared-navigation-de' @ 200.0.0 npm as malicious. It is considered malicious because: - The...