CVE-2022-48616

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges...

CVE-2022-48616

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges...

Command injection

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges...

CVE-2022-48616

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges...

CVE-2022-48616

CVE-2022-48616 corresponds to a Huawei NetEngine AR617VW command injection vulnerability. Connected sources (CNVD-2026-05172, Red Hat, NVD, etc.) describe that an attacker can exploit a command injection flaw to gain elevated privileges on the AR617VW router. The available documents do not provid...

Cloud Connector - Citrix ConfigSync Service error event ID "517"

In Cloud Connector Server, the below Error Event ID 517 is logged. ----------------------- Source: Citrix ConfigSync Service Event ID: 517 Description: There was a problem communicating with the primary Broker. Failed to get minimal Broker configuration. Error details: There was a problem...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from a post-release reuse issue in the WebRTC module...

MAL-2023-8687 Malicious code in rechtspraak.namenlijst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61558cb7df82b273048fac42068f7588594066bdc9e1aec2879d1cebaadedaea The OpenSSF Package Analysis project identified 'rechtspraak.namenlijst' @ 0.9.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8685 Malicious code in npi.rechtspraaknl.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb49ec0b9727917a8198fad5a79119c7e1077433dd354f9de3686469232aaae7 The OpenSSF Package Analysis project identified 'npi.rechtspraaknl.web' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

New Microsoft Incident Response team guide shares best practices for security teams and leaders

As enterprise networks grow in both size and complexity, securing them from motivated cyberthreat actors becomes more challenging. The incident response process can be a maze that security professionals must quickly learn to navigate—which is no easy task. Surprisingly, many organizations still...

New Microsoft Incident Response team guide shares best practices for security teams and leaders

As enterprise networks grow in both size and complexity, securing them from motivated cyberthreat actors becomes more challenging. The incident response process can be a maze that security professionals must quickly learn to navigate—which is no easy task. Surprisingly, many organizations still...

MAL-2023-8681 Malicious code in bynderweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c0e459e61d88421f9f8e8abec619108bcd6e0bb8b0e6f556a442ed551cb0fa1 The OpenSSF Package Analysis project identified 'bynderweb' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in bynderweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c0e459e61d88421f9f8e8abec619108bcd6e0bb8b0e6f556a442ed551cb0fa1 The OpenSSF Package Analysis project identified 'bynderweb' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

Uptime Kuma Security Vulnerability

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from Louis Lam Personal Developer. A security vulnerability exists in versions prior to Uptime Kuma 1.23.9 that stems from the application using WebSocket, but it does not validate that the communication source is valid, which would allow...

New Bluetooth Attack

New attack breaks forward secrecy in Bluetooth. Three news articles: BLUFFS is a series of exploits targeting Bluetooth, aiming to break Bluetooth sessions forward and future secrecy, compromising the confidentiality of past and future communications between devices. This is achieved by exploitin...

BlueBunny - BLE Based C2 For Hak5's Bash Bunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Overview Structure Installation & Start 1. Install required dependencies pip install pygatt "pygattGATTTOOL" Make sure BlueZ is...

Malicious code in @saas-mf/ccm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4491a282ac34d4b4d1727c2376452a4566fb2a48fc548c5a86ef03a62902d9d0 The OpenSSF Package Analysis project identified '@saas-mf/ccm' @ 25.0.9 npm as malicious. It is considered malicious because: - The package...

Man-in-the-Middle (MitM)

github.com/edgelesssys/marblerun is vulnerable to Man-in-the-Middle attack. The vulnerability is due to a lack of explicit verification of the coordinator's certificate. This allows an attacker to intercept the communication between the CLI and the Coordinator, providing false information or...

MAL-2023-8666 Malicious code in react-dom-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4cfe9e9636852d3f77e9d66db174963751bf0c61eb2364bbee74ddff0b84c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information disclosure

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...