January 23, 2024—KB5034203 (OS Build 19045.3996) Preview

None None...

Malicious code in discord.js-lock-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6ced52518f96ad1ced4f124d86601328e2898f7c62f1f619f33a4f0f202a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-117 Malicious code in discord.js-lock-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6ced52518f96ad1ced4f124d86601328e2898f7c62f1f619f33a4f0f202a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-3790 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the Linux kernel's mmu notification mechanism. This mechanism is used to invalidate memory ranges, and depending on the number of iterations...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50129

Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

Flient Smart Door Lock Security Vulnerability

Flient Smart Door Lock is a smart door lock from Flient. Flient Smart Door Lock has a security vulnerability that stems from the use of default credentials...

CVE-2023-50124

CVE-2023-50124 affects Flient Smart Door Lock v1.0. The vulnerability arises from default credentials present on a debug interface, combined with certain design choices, enabling an attacker to unlock the device by replacing the fingerprint stored on the scanner. The issue is described consistent...

CVE-2023-50129

The CVE-2023-50129 issue affects the Flient Smart Door Lock v1.0 where NFC tags lack encryption, enabling an attacker in close proximity to clone a tag and gain perimeter access. CVSS v3.1 vectors indicate Adjacent attack vector, Low attack complexity, No privileges required, with Confidentiality...

PT-2024-8423 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7.2 Description: The vulnerability is related to incorrect lock ordering in the btrfs zone activate function, which can lead to a deadlock. This issue was detected by the btrfs CI when running generic/129,...

Flient Smart Door Lock Security Vulnerability

Flient Smart Door Lock is a smart door lock from Flient. The Flient Smart Door Lock has a security vulnerability that stems from the lack of encryption in the NFC tag...

CVE-2023-50129

Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50129

Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter...

Cockpit door lock auto-unlock is no surprise

TL;DR Through reverse engineering a cockpit door lock controller several years ago, we’ve known about the auto-unlatch issue We couldn’t publish owing to the risk to flight safety, even though some airplane type manuals already described the behaviour in a depressurisation event Now that the Alas...

tokens can be deposited and immediately withdrawn before the intended lock time by depositing right before expiry

Lines of code Vulnerability details Impact tokens can be deposited and immediately withdrawn before the intended lock time by depositing right before expiry. Proof of Concept There is edge cases around the locking and unlocking periods that are not fully considered in the contract. Specifically,...

griefer can create maximum length time locks for other users with only dust

Lines of code Vulnerability details Description veOLAS is the voting token for the OLAS protocol. It functions like the curve.fi voting token in that a user gets more votes the longer they lock their tokens. A user can create a lock for themselves or have another user create a lock for them, usin...