29 matches found
Malicious code in @f5rest/icr-odata-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d28fb3bbf60046908366ebaa32a43e76c4eaeb9646502ca526e1aa54332457 The package @f5rest/icr-odata-adapter was found to contain malicious code...
MAL-2026-1617 Malicious code in @f5rest/icr-odata-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d28fb3bbf60046908366ebaa32a43e76c4eaeb9646502ca526e1aa54332457 The package @f5rest/icr-odata-adapter was found to contain malicious code...
MAL-2026-1616 Malicious code in @f5rest/icr-metadata-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997e0d3cb7fd000b08e52b7679e870d2ade8d698b16aeec6f2497aae10bea376 The package @f5rest/icr-metadata-generator was found to contain malicious code...
Malicious code in @f5rest/icr-metadata-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997e0d3cb7fd000b08e52b7679e870d2ade8d698b16aeec6f2497aae10bea376 The package @f5rest/icr-metadata-generator was found to contain malicious code...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002231)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002231 advisory. The recalculateapicmap function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service ho...
EUVD-2013-6201
Malware in sbrugna...
CVE-2023-3703
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
Default credentials
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
CVE-2023-3703
CVE-2023-3703 affects Proscend Advice ICR Series routers, specifically firmware version 1.76. The vulnerability arises from the use of default credentials, enabling unauthenticated network access with high impact (confidentiality, integrity, availability). Public metrics indicate critical severit...
Proscend Advice ICR Series routers security vulnerability
Proscend Advice ICR Series routers are a series of routers from Proscend China. A security vulnerability exists in Proscend Advice ICR Series routers that stems from the use of default credentials...
Depositors might not be able to withdraw from StabilityPool if any collateral's price drops significantly
Lines of code Vulnerability details In the TroveManager contract, the closeTrove function contains a check to ensure there is more than one trove, as shown below. TroveManager.solL1278-L1282: function closeTroveaddress borrower, address collateral, Status closedStatus internal assertclosedStatus ...
SUSE CVE-2013-6376
The recalculateapicmap function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service host OS crash via a crafted ICR write operation in x2apic mode...
Command injection
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router with GPS4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG /...
CVE-2022-36779
CVE-2022-36779 affects PROSCEND industrial routers (M330-W, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG). Descriptions in connected sources confirm an unauthenticated OS command injection vulnerability in Proscend firmware, enabling arbitrary command execution if a...
PT-2022-7224 · Proscend · Proscend M330-W +7
Name of the Vulnerable Software and Affected Versions: Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions...
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
TCR is temporarily miscalculated in the batchLiquidateTroves function during Recovery Mode. The bug lies in batchLiquidateTroves of TroveManager. When calculating system's entire collateral, we should also exclude the liquidated trove's surplus collateral, since liquidation closes the trove and...
icrkorea.kr Cross Site Scripting vulnerability OBB-1468205
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
icr-heart.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1155676 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting icr-heart.com website and it...