24 matches found
Malicious code in @ts-internal/shared-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afc836ea4b9ecc7e09f0add976470f1b4e253f8b5b53b3ce706889efb349171 The package squats the internal-looking scope @ts-internal/shared-lib on the public npm registry and runs a network beacon both during install...
EUVD-2023-47962
Malicious code in bioql PyPI...
EUVD-2024-30641
Malicious code in bioql PyPI...
MINI-XHPW-MR86-W8FF
Bulletin has no description...
CVE-2023-43556
Memory corruption in Hypervisor when platform information mentioned is not aligned...
CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned...
CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned...
Get License, Hardware and Platform details from API call
Get the output of Hardware, platform and License via API...
Malicious Package
Overview s3trnasfer is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...
Malicious Package
Overview requst is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass impor...
Malicious Package
Overview requiest is a malicious package. This malicious package attempts typosquatting the popular requests package. The malicious script is base64 obfuscated and tries to steal the current username and platform information and send them to a remote host. Malicious behavior python import getpass...
Hitachi Energy LinkOne 信息泄露漏洞
Hitachi Energy LinkOne is an enterprise graphical parts catalog and content delivery solution from Hitachi Energy, Switzerland. It is used to publish, view and locate spare parts for complex equipment and assemblies. A security vulnerability exists in Hitachi Energy LinkOne, which arises from a...
Protect
An information exposure vulnerability in FortiOS WEB UI may allow an unauthenticated attacker to gain platform information such as version, via parsing a JavaScript file...
CVE-2018-13367
An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...
Information disclosure
An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...
CVE-2018-13367
An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...
CVE-2018-13367
CVE-2018-13367 affects FortiOS (Fortinet) WEB UI, where an information-exposure flaw allows unauthenticated attackers to retrieve platform details (version, models) by parsing a JavaScript file served through the admin web UI. Affected releases include FortiOS 6.2.3, 6.2.0 and earlier versions. T...
Intel Power Management Controller Information Disclosure Vulnerability
Intel Power Management Controller is a power management controller from Intel Corporation USA. A security vulnerability exists in Intel Power Management Controller. A local attacker could exploit this vulnerability to disclose sensitive information about the platform...
IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32856)
IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform 9.2 and 9.5. The vulnerability arises because the software communicates sensitive or safety-critical data in plaintext over a channel tha...
The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...