CVE-2022-31801 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...

Malicious code in cadence-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf5debd39aec3e771c0dda1c42d6d3ce09232bd387c3e33c6e2dfd1b7737d639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epc-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38889e06f639b709a464f200703bbb6c2ec05b025c69d1002c150cd874ee73db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owa-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb14eb03fe7358a1ac71f7f835357d50ed868b0f387e5d731feb76664e174b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duty-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d001cd5581e347ca7a86d5dda589c7fdf59f07ee4d0da52efe005686451377aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mozilla-mobile/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f81ce8fcc04e7269be2b94ee6aa1ea2abdbd3f4c8e6286e9c2db240e307ca4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @glencore/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c24fb3cfba1edf0992ba23c73a07778f089ee7b9ca09d85fa0c22155971af47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-2950 · Spacelogic +1 · Spacelogic C-Bus Application Controller +3

Name of the Vulnerable Software and Affected Versions: C-Bus Network Automation Controller - LSS5500NAC versions prior to V1.10.0 Wiser for C-Bus Automation Controller - LSS5500SHAC versions prior to V1.10.0 Clipsal C-Bus Network Automation Controller - 5500NAC versions prior to V1.10.0 Clipsal...

Malicious code in @chegg-me-components/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Ethernet software solutions WISE-4060, Adam-6050 D, and Adam.NET Utility lies in the lack of authentication attempt limits, allowing attackers to gain full access to the device.

The vulnerability of the Microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utility is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow a malicious actor to gain full access to the device remotely...

CVE-2021-33534

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device...

Weidmueller Industrial WLAN 操作系统命令注入漏洞

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. The Weidmueller Industrial WLAN devices operating system command injection vulnerability can be exploited by an attacker to take full control of the device via specially crafted network configuration information...

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

The vulnerability of the CmtViewer application, which manages programmable panels, stems from the lack of limits on authentication attempts. This allows a perpetrator to gain full access to the device.

The vulnerability of the CmtViewer application for controlling programmable panels is related to the lack of restrictions on the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device...

CVE-2020-3330

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

D-Link DSL-2640B B2 Trust Management Issue Vulnerability

The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version, which comes with hard-coded accounts in the router. The vulnerability can be exploited by an attacker to log in to the management interface,...

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

CVE-2019-1950

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...

Vulnerability of the driver /drivers/android/binder.c in the Android operating system, allowing a hacker to gain full control over the device

The vulnerability in the Android operating system’s driver/driver/binder.c code relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to gain full control over the device by using a specially created application...

The vulnerability in the virtual remote connection service for microprogramming control devices of the BMC Supermicro family allows a hacker to gain full control over the device.

The vulnerability of the virtual remote connection service for Microprogramming Software Control Devices of Supermicro is due to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to gain full control over the device by...