CVE-2024-8751

The CVE-2024-8751 entry concerns SICK MSC800 (and MSC800 LFT) with a vulnerability that allows an unauthenticated attacker to modify the device IP via Sopas ET, potentially causing a Denial of Service. Affected versions are MSC800 prior to V4.26 and MSC800 LFT prior to S2.93.20. Remediation is to...

SICK MSC800 安全漏洞

The SICK MSC800 is a programmable logic controller PLC from SICK, Germany. A security vulnerability exists in the SICK MSC800 version 4.26 and SICK MSC800 LFT S version 2.93.20, which originates from a denial of service that allows an unauthenticated attacker to modify the IP address of the produ...

Malicious code in @diotoborg/sit-et-quibusdam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a26adfa92abe547203f09b57bcce902cab5992058c358580dafc130b376832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8632 Malicious code in @diotoborg/sit-et-quibusdam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a26adfa92abe547203f09b57bcce902cab5992058c358580dafc130b376832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8301 Malicious code in @diotoborg/et-facere-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f1874a21cc090ea5a3ee061ec39d1a99485a0bff0f10379ae60a6165019135e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/et-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1f96e65f68cf177e1af182fa386544425715b8c040e0628846e8fd67b16709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/et-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76d02bd5f4d84f1d4d89fdcf85a02b2c43c0cef495b9dabdd7ae02bb7d68d14f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8299 Malicious code in @diotoborg/et-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1f96e65f68cf177e1af182fa386544425715b8c040e0628846e8fd67b16709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/cum-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1548216f3514e2830cd90fa38b7c874ebf73f9abeae02c027bce48e23776cf5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7146 Malicious code in @zitterorg/cum-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1548216f3514e2830cd90fa38b7c874ebf73f9abeae02c027bce48e23776cf5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7351 Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lollms path traversal vulnerability

LoLLMs is a Web UI for a large language multimodal system by Saifeddine ALOUI Personal Developer. A path traversal vulnerability exists in lollms version 9.4.0, which stems from a path traversal vulnerability in the etpersonalityconfig endpoint that can be exploited by an attacker to overwrite th...

CVE-2023-50763

Siemens CVE-2023-50763 affects multiple Siemens/SIPLUS products (e.g., SIMATIC CP 1542SP-1 IRC/CP 1543SP-1, SIPLUS ET 200SP variants, TIM 1531 IRC) where the web server may loop infinitely when processing incomplete PKCS12 certificate chains. This authenticated remote vulnerability could allow a ...

MAL-2024-1497 Malicious code in @juiggitea/vel-et-repudiandae-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6e68320d142fd1a5b023696ebcf04d935dc6a848bc7f9e35b996e72b9c4216c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/fuga-aliquid-vitae-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1bbb0400ecc01d32c5db603eee1b14b65200c757b01f338c2fc83e4a260760 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for et (FEDORA-2024-bd9e67c117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-b745c97f4b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-94a155818c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

heros-et-dragons.fr Cross Site Scripting vulnerability OBB-3907948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Siemens Multiple Vulnerabilities in SCALANCE Products (CVE-2022-34821)

Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for the affected products and recommends to update ...