22 matches found
autotrain-advanced (>=0.7.53, <=0.7.101), dora-distil-whisper (>=0.3.6, <=0.3.8) +7 more potentially affected by CVE-2026-69112 via accelerate (0.29.3)
accelerate PYPI version 0.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.53, =0.3.6, =0.0.1a0, =0.1.0, =0.2.0, =0.1.0, =0.1.2 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-38...
EUVD-2024-27451
Malicious code in bioql PyPI...
CVE-2024-2502
An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected. This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event a tamper reset occurs. This impacts Series 2 HSE-SVH...
CVE-2024-2502
CVE-2024-2502 describes a tamper-handling bug in Silicon Labs Series 2 HSE-SVH devices where the TAMPERRSTCAUSE register may not be updated on a level 4 tamper event, potentially preventing the system from blocking boot attempts after consecutive tamper resets as intended. Affected products inclu...
CVE-2024-2502 Failure to update the tamper reset cause register when a tamper event occurs
An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected. This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event a tamper reset occurs. This impacts Series 2 HSE-SVH...
CVE-2024-2502 Failure to update the tamper reset cause register when a tamper event occurs
An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected. This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event a tamper reset occurs. This impacts Series 2 HSE-SVH...
CVE-2024-2502: Improper Check for Unusual or Exceptional Conditions
An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected. This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event a tamper reset occurs. This impacts Series 2 HSE-SVH...
Silicon Labs Series 2 HSE-SVH security vulnerabilities
Silicon Labs Series 2 HSE-SVH is a wireless device from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs Series 2 HSE-SVH that originates from the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event occurs. The following products are affected:...
resources.hse.gov.uk Cross Site Scripting vulnerability OBB-3902078
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
resources.hse.gov.uk Cross Site Scripting vulnerability OBB-3886026
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
resources.hse.gov.uk Cross Site Scripting vulnerability OBB-3882769
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Threat spotlight: Conti, the ransomware used in the HSE healthcare attack
On the 14th of May, the Health Service Executive HSE, Ireland’s publicly funded healthcare system, fell victim to a Conti ransomware attack, forcing the organization to shut down more than 80,000 affected endpoints and plunging them back to the age of pen and paper. This happened a week after...
A week in security (May 17 – May 23)
Last week on Malwarebytes Labs, we looked at a banking trojan full of nasty tricks, explained some tips and pointers for using VirusTotal, and dug into how an authentication vulnerability was patched by Pega Infinity. We also explored how a Royal Mail phish deploys evasion tricks to avoid analysi...
A doctor reveals the human cost of the HSE ransomware attack
"It’s cracking, the whole thing." The words were delivered quickly, but in a thoughtful and measured way. As if the person saying them was used to delivering difficult news. Little surprise, given they belonged to a doctor. But this doctor wasnt describing a medical condition—this was their...
family.hse.ru Cross Site Scripting vulnerability OBB-1489841
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Command injection
Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...
CVE-2006-1961
Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...
CVE-2006-1961
Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...
CVE-2006-1961
CiscoWorks WLSE/WLSE Express <2.13, HSE and URT
CVE-2004-0391
CVE-2004-0391 affects Cisco WLSE (Wireless LAN Solution Engine) versions 2.0–2.5 and HSE (Hosting Solution Engine) 1.7–1.7.3, which contain a hardcoded username and password. The root cause is hardcoded credentials allowing remote attackers to add new users, modify existing users, and change conf...