Exploit for CVE-2025-47423

CVE-2025-47423 – Local File Inclusion in Personal Weather Stat...

Configure a Proper SSH Service Authentication Mode

A proper authentication mode helps ensure user and system data security. Typically, the user/password authentication mode is suitable for human-machine users. In non-interactive login scenarios, the public and private keys are suitable for authentication. In high-risk scenarios, only the public a...

Configure a Proper SSH Service Authentication Mode

A proper authentication mode helps ensure user and system data security. Typically, the user/password authentication mode is suitable for human-machine users. In non-interactive login scenarios, the public and private keys are suitable for authentication. In high-risk scenarios, only the public a...

K000151201: OpenSSL vulnerability CVE-2024-12797

Security Advisory Description Issue summary: Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSLVERIFYPEER verification mode is set. Impact summary: TLS and DTLS...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-43.0.1-cp37-abi3-manylinux_2_28_x86_64.whl CVE-2024-12797

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-43.0.1-cp37-abi3-manylinux228x8664.whl CVE-2024-12797. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-12797 DESCRIPTION: Issue summary: Clients...

MAL-2025-3649 Malicious code in toloka-tb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 198cb1933f3be0985447f2de1d00de3b6dfc8164eb3f11c7874184ae92b97553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3623 Malicious code in hungarian-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1160564461344c0e05baf24aaa2f15cbe54adc45f3125eaa672834874ecd1cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3614 Malicious code in babel-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef77aeb30aa83ff02708a8b79fc182591838ee0f280c48d729eca82e9a60bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3640 Malicious code in platformio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9bb7d5665eff08ce5b374ad9aed6cfbc3e52382b8844ec4debdba9b0de6ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3635 Malicious code in make-plural-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef999981379280f98605a8386dda39c26b1b27975f440cb627710a7f01a213ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3636 Malicious code in meteor-roles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1fc58c157a731ac3f86cb748d151de5034b62c77de3149f0b97573789b402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3634 Malicious code in lucide-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c571b67979d102e5ccf96df30cc81389915df3cafeda514d98b4ebd24ce031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3904 Malicious code in lrc20-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...

MAL-2025-3698 Malicious code in substrate-faucet (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c694048c1a8c1f3c9b8f183f75e0a9464e084cdaa8fc58c9a770190c4ab4824a Any computer that has this package installed or running should be considered...

CVE-2024-58135

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

AZL-61741 CVE-2024-58135 affecting package perl-Mojolicious 8.57-3

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

AZL-61822 CVE-2024-58135 affecting package perl-Mojolicious 8.57-3

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

DEBIAN-CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

Mojolicious 安全漏洞

Mojolicious is Mojolicious open source Perl-based real-time web framework. A security vulnerability exists in Mojolicious 9.39 and earlier versions, which stems from the use of hard-coded strings or application class names as HMAC session keys, which could lead to session forgery...