IBM PowerSC Cross-Site Scripting Vulnerability

IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC suffers from a cross-site scripting vulnerability that can be exploited by attackers to inject malicious HTML code...

IBM AIX security vulnerabilities

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. A command execution vulnerability exists in IBM AIX version 7.3, VIOS version 4.1, which stems from Perl's failure to properly filter construct command special...

CVE-2023-24332

A stack overflow vulnerability in Tenda AC6 with firmware version USAC6V5.0reV03.03.02.01cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet...

MAL-2024-1029 Malicious code in ember-power-calendar-dayjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ddea44645d593def41662f97e74c980145082e9cb59e599c1e14a713eb2258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ember-power-calendar-dayjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ember-power-calendar-dayjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ddea44645d593def41662f97e74c980145082e9cb59e599c1e14a713eb2258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-19442 · Gecko Sdk · Gecko Sdk

Name of the Vulnerable Software and Affected Versions: Gecko SDK versions through 4.4.0 Description: The issue arises from the use of a True Random Number Generator TRNG before its initialization by the ECDSA signing driver when exiting low-power modes EM2/EM3 on Virtual Secure Vault VSE devices...

Tenda AC6 security vulnerabilities

Shenzhen Jixiang Tenda Technology Co., Ltd AC6 is a dual-band wireless router from Tenda Tenda, supporting IPv4 and IPv6 protocols, adopting 802.11ac/n wireless standard and providing 1167Mbps wireless transmission rate. Ltd. AC6 suffers from a stack buffer overflow vulnerability that originates...

Moderate: Red Hat Bug Fix Advisory: fence-agents update

An update for fence-agents is now available for Red Hat Enterprise Linux 8. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster...

IBM PowerVM Hypervisor Information Disclosure Vulnerability (CNVD-2024-09173)

IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. Providing a secure and scalable virtualized environment, these applications are built on the advanced RAS capabilities and leading performance of the Power Systems platform. An information disclosure...

Siemens SIMATIC CP products Uncontrolled Resource Consumption (CVE-2023-37195)

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...

PT-2024-21565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel, specifically in the ACPI processor idle functionality. After unregistering the CPU idle device, the associated memory is not freed,...

Authentication fails through Remote Power shell SDK

Authentication fails through Remote Power shell SDK whenupper case and lower case are present in the Customer ID...

PT-2024-3411 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL dereference in the scmi perf domain remove function when the power-domain-cells property is missing in the Device Tree DT provided to the system. This...

Janitza UMG Power Quality Measuring Weak Authentication (CVE-2015-3972)

The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack. This plugin only works with Tenable.ot. Please visit...

Janitza UMG Power Quality Measuring Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-3969)

Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port 1 1234 or 2 1235. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...

Janitza UMG Power Quality Measuring Improper Session Token Generation (CVE-2015-3973)

Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values. This plugin only works with Tenable.ot. Please visit...

Janitza UMG Power Quality Measuring Cross-Site Request Forgery (CVE-2015-3967)

Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Janitza UMG Power Quality Measuring Credentials Management Errors (CVE-2015-3968)

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CloudMiner - Execute Code Using Azure Automation Service Without Getting Charged

Execute code within Azure Automation service without getting charged Description CloudMiner is a tool designed to get free computing power within Azure Automation service. The tool utilizes the upload module/package flow to execute code which is totally free to use. This tool is intended for...