Siemens Sinteso EN Cerberus PRO EN Fire Protection Systems

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens 多款产品安全漏洞

Cerberus PRO EN is a fire protection system consisting of fire panels, detection and management stations. It is available to Siemens partners and complies with the European standard EN 54 for fire detection and alarm systems. Sinteso EN is a fire protection system consisting of fire panels,...

DEBIAN-CVE-2021-47015

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer completion, it means we are hitting a hardware bug a...

berlin-en-ligne.com Cross Site Scripting vulnerability OBB-3859645

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

voeding-en-fitness.nl Improper Access Control vulnerability OBB-3856335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RICOH MP C2003 Cross-site Scripting (CVE-2018-17315)

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

MAL-2024-989 Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

MAL-2024-992 Malicious code in en-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89 The OpenSSF Package Analysis project identified 'en-calendar' @ 1.0.1 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in en-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89 The OpenSSF Package Analysis project identified 'en-calendar' @ 1.0.1 npm as malicious. It is considered malicious because: - The package execut...

vaux-en-amienois.net Cross Site Scripting vulnerability OBB-3837625

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

en-journal.org Cross Site Scripting vulnerability OBB-3828781

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

parfumerie-en-ligne.com Improper Access Control vulnerability OBB-3828136

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mesnieres-en-bray.fr Improper Access Control vulnerability OBB-3824925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cenac-en-perigord.fr Improper Access Control vulnerability OBB-3824315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of D-Link DIR-850L B1 router microprogramming software lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-850L B1 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing when dealing with the en parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2023-49004

An issue in D-Link DIR-850L v.B1FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter...

CVE-2023-49004

An issue in D-Link DIR-850L v.B1FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter...

D-Link DIR-850 Security Vulnerability

The D-Link DIR-850 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-850L v.B1FW223WWb01. A remote attacker can exploit this vulnerability to execute arbitrary code via specially crafted scripts on the en parameter...

PT-2023-7920 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L version B1 FW223WWb01 Description: The issue is related to the firmware of D-Link DIR-850L routers, specifically version B1 FW223WWb01, where a remote attacker can execute arbitrary code via a crafted script to the en paramete...