Malicious code in null_hash_grab_decode (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2775 Malicious code in null_hash_grab_decode (npm)

--- -= Per source details. Do not edit below this line.=-...

Default configuration

In Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517, an attacker can self-sign session cookies by knowing the target's MAC address and the user's password hash. Guest users disabled by default can be abused using a null/empty hash and allow an unauthenticated attacker to login as guest...