MAL-2024-1018 Malicious code in confusiontestt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis de074951e7ccfafea6554140dc00823f14dd665c36e60eb6d06933018831f53e The OpenSSF Package Analysis project identified 'confusiontestt' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CLSA-2024-1708094049 Fix of 8 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-23851 - dm: limit the number of targets and parameter size area CVE-url: https://ubuntu.com/security/CVE-2024-1086 - netfilter: nftables: reject QUEUE/DROP verdict parameters CVE-url: https://ubuntu.com/security/CVE-2023-35827 - ravb: Fix use-after-fr...

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming software and Cisco Firepower Management Center’s network management software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers, as well as the Cisco Firepower Management Center’s network management software, is related to improper code generation. Exploiting this...

The vulnerability of the application programming interface of Cisco Expressway micro-programming software and Cisco TelePresence Video Communication Server micro-programming software for device management allows a attacker to perform a CSRF attack.

The vulnerability of the application programming interface of Cisco Expressway micro-programming software and Cisco TelePresence Video Communication Server micro-programming software for device management systems is related to the manipulation of cross-site requests. Exploiting this vulnerability...

Huawei EMUI Security Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei. A security vulnerability exists in Huawei EMUI, which originates from a stack overflow vulnerability in the NFC module...

How Businesses Can Safeguard Their Communication Channels Against Hackers

Efficient communication is a cornerstone of business success. Internally, making sure your team communicates seamlessly helps you avoid friction losses, misunderstandings, delays, and overlaps. Externally, frustration-free customer communication is directly correlated to a positive customer...

Exploit for Use of Hard-coded Credentials in Gog Galaxy

GOG Galaxy - Research Artifacts Repository Structure This...

MAL-2024-1007 Malicious code in @dh-io-globalelem/footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4022d6e9ad567de4e27943e9f7b877b7f4fc8ad0dc9e8c9dcf81738af56bc2a2 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-component' @ 5.990.10 npm as malicious. It is considered malicious...

Malicious code in @dh-io-globalelem/footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4022d6e9ad567de4e27943e9f7b877b7f4fc8ad0dc9e8c9dcf81738af56bc2a2 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-component' @ 5.990.10 npm as malicious. It is considered malicious...

Input validation

An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 and 7.4.0 - 7.4.1 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch...

CVE-2023-47537

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel...

CVE-2023-47537

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel...

CVE-2023-4537

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2...

Design/Logic Flaw

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2...

CVE-2023-4537 Protocol Downgrade in Comarch ERP XL

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2...

CVE-2023-4537

CVE-2023-4537 affects Comarch ERP XL client (ERP XL: 2020.2.2–2023.2). The issue is a server‑side MS SQL protocol downgrade that can lead to unencrypted communication vulnerable to data interception and modification. The available documents confirm the affected software and the root cause (downgr...

DS Wireless Communication Code Execution

Exploit Title: DS Wireless Communication Remote Code Execution Date: 11 Oct 2023 Exploit Author: MikeIsAStar Vendor Homepage: https://www.nintendo.com Version: Unknown Tested on: Wii CVE: CVE-2023-45887 """This code will inject arbitrary code into a client's game. You are fully responsible for al...

DS Wireless Communication - Remote Code Execution

Exploit Title: DS Wireless Communication Remote Code Execution Date: 11 Oct 2023 Exploit Author: MikeIsAStar Vendor Homepage: https://www.nintendo.com Version: Unknown Tested on: Wii CVE: CVE-2023-45887 """This code will inject arbitrary code into a client's game. You are fully responsible for al...

PT-2024-13241

Name of the Vulnerable Software and Affected Versions Comarch ERP XL versions 2020.2.2 through 2023.2 Description The Comarch ERP XL client is vulnerable to an MS SQL protocol downgrade request from the server side, which could lead to unencrypted communication. This makes the communication...

MAL-2024-1000 Malicious code in custom-solutions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72a2a270586bc778c1c8a52b2a28ad657e33370ff5e8df12cc812823127d9a1f The OpenSSF Package Analysis project identified 'custom-solutions' @ 20.8.9 npm as malicious. It is considered malicious because: - The package...