490 matches found
Malicious code in ic-master-wordpress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d19ae5087f1493c0f8980ff5ae6a03be7f82b11c1891505418ccd296de41166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
...
Malicious code in ic-flow-platform (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 083c1a7beb41abdd8e33841c034133e42f802c4f7de64e47815c139f65023b0e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10582 Malicious code in ic-flows-platform (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7ddd18ddba219f2d0fe4c9bceab7e456d97d23dd4ba95b9cecd06bffecef2bef A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10581 Malicious code in ic-flow-platform (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 083c1a7beb41abdd8e33841c034133e42f802c4f7de64e47815c139f65023b0e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in ic-flows-platform (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7ddd18ddba219f2d0fe4c9bceab7e456d97d23dd4ba95b9cecd06bffecef2bef A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
GHSA-FMJ7-7GFW-64PG Agent Dart is missing certificate verification checks
Certificate verification in lib/agent/certificate.dart has been found to contain two issues: - During the delegation verification in checkDelegation function the canisterranges aren't verified. The impact of not checking the canisterranges is that a subnet can sign canister responses in behalf of...
Agent Dart is missing certificate verification checks
Certificate verification in lib/agent/certificate.dart has been found to contain two issues: - During the delegation verification in checkDelegation function the canisterranges aren't verified. The impact of not checking the canisterranges is that a subnet can sign canister responses in behalf of...
CVE-2024-7884 Memory leak when calling a canister method via `ic_cdk::call`
When a canister method is called via iccdk::call , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internally, the state of the Future is tracked and stored in a struct called CallFutureState. A bug in the polling implementation of the CallFuture...
Siemens LOGO! V8.3 BM Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-7616
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...
CVE-2024-7616
A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...
Edimax IC-6220DC和Edimax IC-5150W 命令注入漏洞
Edimax IC-6220DC and Edimax IC-5150W are both smart wireless cameras from China Xunzhou Edimax. Command injection vulnerability exists in Edimax IC-6220DC and Edimax IC-5150W version 3.06 and earlier, which stems from the parameter host of the function cgiFormString in the file ipcamcgi, which ca...
CVE-2024-7616
Edimax IC-6220DC and IC-5150W (firmware ≤ 3.06) expose a command-injection vulnerability in the ipcam_cgi module, specifically via the cgiFormString function manipulating the host argument. Exploitation could yield unauthorized commands on affected devices. Remediation from the connected sources:...
PT-2024-38453 · Edimax · Edimax Ic-6220Dc +1
Name of the Vulnerable Software and Affected Versions: Edimax IC-6220DC and IC-5150W versions up to 3.06 Description: A critical issue affects the cgiFormString function of the ipcam cgi file. The manipulation of the host argument leads to command injection. The vendor was contacted about this...
CVE-2024-4341 IDOR in ExtremePacs's Extreme XDS
Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3928...
ic-logistics.com Cross Site Scripting vulnerability OBB-3914895
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-52488
In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent $00, followed by all the FIFO data without having to...
CVE-2023-52488
A cache corruption vulnerability was found in the Linux kernel, which affects the regmap cache and is caused by the FIFO Read/Write R/W functions regmaprawread and regmaprawwrite during burst mode. These functions are able to perform IO operations over multiple registers, and if the regmap cache ...