Stack overflow

A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launche...

Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-2635)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously...

Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-94 Malicious code in wdpr-node-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2c2f25a3f7cd69d4500c298b6a66498423b248384970031de6dc2fd42221ecd The OpenSSF Package Analysis project identified 'wdpr-node-cdn' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b4f977d84345ded72bac3adc44f78bfc69c9393bf8223ddff83c73b01673ca2 The OpenSSF Package Analysis project identified 'pecko' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-87 Malicious code in newbooking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c36258c896dcadd103fd2263e6d19e4ae885350c438c2efc971e816f7d39215d The OpenSSF Package Analysis project identified 'newbooking' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-84 Malicious code in aurora-webmail-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...

Flient Smart Door Lock Security Vulnerability

Flient Smart Door Lock is a smart door lock from Flient. The Flient Smart Door Lock has a security vulnerability that stems from the lack of encryption in the NFC tag...

MAL-2024-56 Malicious code in test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94d087127b055251bef2c40e4c884c82c7f4e39f4631fa5995116fb9b1d65f4f The OpenSSF Package Analysis project identified 'test-devoxx' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

Siemens SIMATIC CN 4100 Authorization Bypass Vulnerability

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. An authorization bypass vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to remotely log in as root and take control of the device...

CVE-2024-22124

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

CVE-2024-22124

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

CVE-2024-22124 Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

CVE-2024-22124

CVE-2024-22124 affects SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher—specifically listed kernel and related components (KERNEL 7.22/7.53/7.54; KRNL64UC 7.22/7.53; KRNL64NUC 7.22/7.22_EXT; WEBDISP 7.22_EXT/7.53/7.54). The vulnerability enables an attacker to access informatio...

CVE-2024-22124 Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

Siemens SIMATIC CN 4100 安全漏洞

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. A Use Default Credentials vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to gain full control of an affected device using credentials...

DTLS: Deprecated DTLSv1.0 Detection

It was possible to detect the usage of the deprecated DTLSv1.0 protocol on this system. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...