Malicious code in anf-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-blue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5108d06d664409328068b5859c46add10bb08c95d223960e1bf8910d507f5466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-21404

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data...

Code injection

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data...

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

CVE-2023-25556

CVE-2023-25556 describes an improper authentication weakness in KNX-based devices where a key of fewer than seven digits can compromise a device if an attacker has KNX access. Connected sources tie this to Schneider Electric StruxureWare/KNX implementations and Merten KNX, noting the root cause a...

SecurePoint UTM 12.x Session ID Leak

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SecurePoint UTM Vendor URL: https://www.securepoint.de/en/for-companies/firewall-vpn Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2023-01-05 Date...

Malicious code in dreamteam11-google-oast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3857cd535de263c6bc08caaf87b458f00b7c3c5f19032e63513a2656618c8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the following advisories and apply the necessary updates. iOS 15.7...

Malicious code in omnigodz_testpkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71e35f587d48902bd1b3b26de78a66c82c7f28faf7e7d339b607497d40cc318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0432

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system OS from the device in the context of the user "root." If the attacker has credentials for the web service, then the...

CVE-2023-0432 CVE-2023-0432

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system OS from the device in the context of the user "root." If the attacker has credentials for the web service, then the...

Malicious code in pixelstreaming-sfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1390345d3954601dd4e78b036f59a0da6ea0e7df8f7720a3894fd0b4881b628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Wago Multiple Products Web-based Management Missing Authentication for Critical Function (CVE-2022-45138)

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

CVE-2023-1257 CVE-2023-1257

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...

PT-2023-1571 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue exists due to the lack of neutralization of special elements used in operating system commands in the ArubaOS web-based management interface. This allows a remote attacker to...

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

Design/Logic Flaw

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

CVE-2022-45138 WAGO: Missing Authentication for Critical Function

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

CVE-2022-45138

CVE-2022-45138 affects Wago web-based management: the configuration backend can be accessed by unauthenticated users, enabling read/write of device parameters and potentially full device compromise. Root cause per sources is missing authentication/authorization on the web-based API. Impact descri...