[SECURITY] Fedora 41 Update: fido-device-onboard-0.5.1-2.fc41

A rust implementation of the FIDO Device Onboard Specification...

MAL-2025-1195 Malicious code in web3-onboard-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-onboard-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16401 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress versions prior to 6.2.2 Description: The issue is related to a missing capability check on the wpte onboard save function callback function, allowing...

Supermicro Onboard IPMI Port 49152 Sensitive File Exposure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Supermicro Onboard IPMI Port 49152 Sensitive File Exposure', 'Description' = %q This module abuses a file exposure vulnerability...

Supermicro Onboard IPMI Static SSL Certificate Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Supermicro Onboard IPMI Static SSL Certificate Scanner', 'Description' = %q This module checks for a static SSL certificate shipped with Supermic...

Malicious code in cta-onboard-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b526b19f50a6fcc3db7db99ebbc2d26c502b21b0563251b2aa688026f0b916f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2035 Malicious code in cta-onboard-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b526b19f50a6fcc3db7db99ebbc2d26c502b21b0563251b2aa688026f0b916f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...

PT-2024-12182 · Skoda · Skoda Vehicles

Name of the Vulnerable Software and Affected Versions: Skoda vehicles affected versions not specified Description: The issue allows an attacker to send a specific reset UDS request via the OBDII port of Skoda vehicles, potentially causing the vehicle engine to shut down and resulting in the denia...

CVE-2023-24294

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...

CVE-2023-24294

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...

CVE-2023-24294

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...

CVE-2023-23324

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account...

CVE-2023-23325

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter...

CVE-2023-23324

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account...

CVE-2023-23325

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter...

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in Zumtobel Netlink CCD Onboard firmware version 3.80, which originates from a command injection via the NetHostname parameter...