10093 matches found
Node-SAML SAML Authentication Bypass
Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any...
GHSA-M837-G268-MMV7 Node-SAML SAML Authentication Bypass
Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any...
Scavenger Trojan Targets Crypto Wallets via Game Mods and Browser Flaws
New Scavenger Trojan steals crypto wallet data using fake game mods and browser flaws, targeting MetaMask, Exodus, Bitwarden, and other popular apps...
K000152723: Golang crypto/tls vulnerabilities CVE-2023-39321 and CVE-2023-39322
Security Advisory Description CVE-2023-39321 Processing an incomplete post-handshake message for a QUIC connection can cause a panic. CVE-2023-39322 QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection...
The vulnerability of the tipc_aead_encrypt_done() function in the net/tipc/crypto.c module of Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the tipcaeadencryptdone function in the net/tipc/crypto.c module of Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formWifiExtraSet (/goform/WifiExtraSet) function in the TendaFH1205 router software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the formWifiExtraSet /goform/WifiExtraSet function in the TendaFH1205 router microprogramming system is related to the operation that goes beyond the buffer in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability can allow an attacker to cause...
Coyote Trojan First to Use Microsoft UI Automation in Bank Attacks
Coyote Trojan becomes first malware to abuse Microsoft’s UI Automation in real attacks, targeting banks and crypto platforms with stealthy tactics...
CLSA-2025-1753208069 nodejs: Fix of CVE-2025-23166
CVE-2025-23166: src: fix error handling on async crypto operations...
MAL-2025-6118 Malicious code in privmx-crypto (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 588af33eb2e6f5ec7452d71856c5f1c602724084bbae3765549330176f59eaeb Any computer that has this package installed or running should be considered...
Malicious code in privmx-crypto (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 588af33eb2e6f5ec7452d71856c5f1c602724084bbae3765549330176f59eaeb Any computer that has this package installed or running should be considered...
Malicious code in crypto-notifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14edf6ea7a68922079f8577f719246d4b53f4a31565dab3714813dc76cb78bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5906 Malicious code in crypto-notifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14edf6ea7a68922079f8577f719246d4b53f4a31565dab3714813dc76cb78bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in square-crypto-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2a693727e119b7e668536dcb77730f98ba80f9bcc2b03f5bbc80f53fea74d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5957 Malicious code in square-crypto-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2a693727e119b7e668536dcb77730f98ba80f9bcc2b03f5bbc80f53fea74d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-7596
A vulnerability was found in Tenda FH1205 2.0.0.7775. It has been rated as critical. This issue affects the function formWifiExtraSet of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be initiated remotely. The...
PT-2025-29452 · Tenda · Tenda Fh1205
Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical vulnerability exists in Tenda FH1205. The issue affects the formWifiExtraSet function within the /goform/WifiExtraSet file. Manipulation of the wpapsk crypto argument leads to a...
MAL-2025-191707 Malicious code in crpt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27d11f666afed6152d1e6e4f510ee725397a411a11ca6338fb5583dd21b400cc Importing the module starts downloading or decrypting, and then executing an executable being a wide recognized malware/Infostealer Redline family --- Category...
