CVE-2024-8419

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication...

CVE-2024-8419

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication...

CVE-2024-8419

CVE-2024-8419 affects the AC4xxS line of ifm electronic devices. The root cause is missing authentication in an endpoint script, allowing an unauthorized remote attacker to force the system into a fail-safe state over the network. Public details across sources confirm the basic impact but do not ...

Malicious code in nava-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fb4caf6f9420831f8001a0382c3a357186529a0cf6e822e884eeaa90182ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ifm electronic Smart PLC AC4xxS 访问控制错误漏洞

The ifm electronic Smart PLC AC4xxS is a series of hosts/gateways from ifm electronic Germany. The ifm electronic Smart PLC AC4xxS suffers from an access control error vulnerability that stems from a lack of authentication in endpoint scripts, which could allow an unauthorized, remote attacker to...

PT-2025-27430

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a script hosted by an endpoint that lacks authentication, allowing an unauthorized remote attacker to put the system in a fail-safe state over the network. Recommendations...

PT-2025-37205

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the ath10k driver where, in rare cases, the driver may lose connection with the PCIe bus. This can lead to system crashes during resuming due to...

Malicious code in es6-module-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba0c43a1f7b9408d4c635c3862281a3d3c970336ed789bd8a02920546e626da Any computer that has this package installed or running should be considered...

Malicious code in demo-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7efb62b6588eae7ef14f94a8669af77aca640e90b4677dfcddbba8cce6ad547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-30134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the KVM component related to handling hypercalls HVCALL FLUSH VIRTUAL ADDRESS LIST and HVCALL FLUSH VIRTUAL ADDRESS LIST EX within KVM guests utilizin...

Malicious code in websdk-colours (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 525b4f90e12d0654f3383e01859016dab00f6bbab39b2d38eeb165bb8f09b63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev-filterjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c489283b73201bf0c4469fb76e21a9f5346d08f364c05c4938cc39030d20b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jimu-layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e335b07773d41eec063c08f22dfd26f8bbb4ea165ab0080df6f0d105f9e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-50092

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

CVE-2022-50053 iavf: Fix reset error handling

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavfclose in iavfresettask error handling. Doing so can lead to double call of napidisable, which can lead to deadlock there. Removing VF would lead to iavfremove task being stuck, becau...

Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

Malicious code in raydium-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15f2bf4f7d00a9a160e45525fc4b09ccf0957db423f83602f0e2aa72dde0ff2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supersccan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681626695cb78322698dfe68cde7981a4b53ae9a23307f738f4908589c8ef2bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-mvc-cid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110e255563acbb72629ba03afd504713dfd8fbbdcd576258dde5d481975ac5ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...