Lucene search
+L

204 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @zalastax/nolb-mic (npm)

The package @zalastax/nolb-mic was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-12293 Malicious code in @zalastax/nolb-mic- (npm)

The package @zalastax/nolb-mic- was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-12292 Malicious code in @zalastax/nolb-mic (npm)

The package @zalastax/nolb-mic was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-12295 Malicious code in @zalastax/nolb-mic_ (npm)

The package @zalastax/nolb-mic was found to contain malicious code...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/11 12:0 a.m.6 views

PT-2025-46604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s sunrpc implementation where a null pointer dereference can occur during checksum processing. Specifically, in the xdr stream decode opaque auth...

5.5CVSS7.5AI score0.00516EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 5:52 a.m.9 views

CVE-2023-22654

Client-side enforcement of server-side security issue exists in T Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser. Affected products and versions are as follows: T Corporation data logger products TR-71W/72W a...

5.4CVSS6.9AI score0.00508EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:31 a.m.18 views

CVE-2023-27388

Improper authentication vulnerability in T Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T Corporation data logger products TR-71W/72W all firmware versions...

9.8CVSS7.3AI score0.01252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:18 a.m.10 views

CVE-2023-23545

Missing authentication for critical function exists in T Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication. Affected products and versions are as follows: T Corporation data logger products...

5.3CVSS7.3AI score0.00835EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:53 p.m.8 views

CVE-2021-37605

In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check MIC bytes...

7.5CVSS7.1AI score0.0128EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 p.m.12 views

CVE-2020-13595

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.0 through 4.2 for ESP32 devices returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can...

6.5CVSS6.9AI score0.0087EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:55 a.m.9 views

CVE-2019-1166

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection, aka 'Windows NTLM Tampering Vulnerability'...

5.9CVSS6.5AI score0.68108EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:34 a.m.11 views

CVE-2025-3725

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to...

9.8CVSS7.2AI score0.00707EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.3 views

PCMan FTP Server MIC Command Buffer Overflow Vulnerability

PCMan FTP Server is a server software for file transfer protocol that provides file upload and download functions. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the MIC Command Handler component failing to properly manage memory when processing a specific request. No...

9.8CVSS7.4AI score0.00707EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 8:15 p.m.15 views

CVE-2025-3725

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to...

9.8CVSS6AI score0.00707EPSS
SaveExploits1References4
NVD
NVD
added 2025/04/16 8:15 p.m.31 views

CVE-2025-3725

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to...

9.8CVSS0.00707EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/16 8:0 p.m.75 views

CVE-2025-3725

PCMan FTP Server 2.0.7 is affected by a buffer overflow in the MIC Command Handler . The vulnerability can be exploited remotely, and multiple sources describe that the exploit has been disclosed publicly. The exact root cause is tied to how memory is managed by the MIC Command Handler when proce...

9.8CVSS7.4AI score0.00707EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/16 8:0 p.m.10 views

CVE-2025-3725 PCMan FTP Server MIC Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to...

7.5CVSS7.4AI score0.00707EPSS
SaveExploits1References4
Citrix
Citrix
added 2024/10/30 12:0 a.m.17 views

After upgrading VDA from 2203 LTSR to 2402 LTSR, mic volume set to 0 in ICA/HDX session.

After upgrading VDA from 2203 LTSR to 2402 LTSR, mic volume set to 0 in ICA/HDX session connected from Citrix Worksapce app 2203.1 LTSR...

7AI score
SaveExploits0
HackRead
HackRead
added 2024/10/20 8:6 p.m.45 views

“HM Surf” macOS Flaw Lets Attackers Access Camera and Mic – Patch Now!

Researchers at Microsoft discovered a new macOS vulnerability, "HM Surf" CVE-2024-44133, which bypasses TCC protections, allowing unauthorized access…...

5.5CVSS6.9AI score0.0735EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2024/09/18 9:4 a.m.11 views

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Google has announced that it's rolling out a new set of features to its Chrome browser that gives users more control over their data when surfing the internet and protects them against online threats. "With the newest version of Chrome, you can take advantage of our upgraded Safety Check, opt out...

6.9AI score
SaveExploits0
Rows per page
Query Builder