Siemens CPCI85 Central Processing和SICORE Base system 访问控制错误漏洞

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Malicious code in dimaspedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c763b10d1c1518d7a1b83655aa43d38243278e71daad1953955c08b1b93d095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in the Longse NVR that stems from transmitting a user's login and password to a remote control service without the use of any encryption, allowing an attacker to eavesdrop ...

PT-2024-36780 · Longse · Lbh30Fe200W +1

Name of the Vulnerable Software and Affected Versions: Longse NVR Network Video Recorder model NVR3608PGE2W Longse model LBH30FE200W cameras Description: The issue concerns the transmission of user login and password to a remote control service without encryption, allowing an on-path attacker to...

Malicious code in @zitterorg/adipisci-quae-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bfec270c90b3be9a92be8e18740b194c8100b3df718b92afe8d0aed6b22a916 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/enim-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c0e2f02fb7ceddf7a27341ffeefee6c938a5ee60c2df8f9903292feddcd4e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the application software interfaces of Session Smart Router and WAN Assurance, Session Smart Conductor, relates to bypassing the authentication process by using an alternative path or channel. This allows a perpetrator to gain full control over the device.

The vulnerability of the Application Programming Interface of routers like Session Smart Router and WAN Assurance, Session Smart Conductor, lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor,...

CVE-2024-5826 Remote Code Execution via Prompt Injection in vanna-ai/vanna

In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...

The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage lies in the possibility of writing beyond the buffer in memory, allowing attackers to bypass authentication procedures.

The vulnerability of microprogramming software in Schneider Electric Sage lighting and energy consumption remote control devices is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures by...

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage. This allows a perpetrator to upload arbitrary files and embedded software.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to the default access settings. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and embedded...

The vulnerability in the web interface of microprogramming software for devices for remote control of lighting and energy consumption from Schneider Electric Sage allows a perpetrator to compromise the integrity of protected information and cause service interruptions.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a...

rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

Summary The next ruby code is vulnerable to denial of service due to the fact that the user controlled data profilerruns was not contrained to any limitation. Which would lead to allocating resources on the server side with no limitation CWE-770. ruby runs = request.params'profilerruns' ||...

GHSA-8C8Q-2XW3-J869 rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

Summary The next ruby code is vulnerable to denial of service due to the fact that the user controlled data profilerruns was not contrained to any limitation. Which would lead to allocating resources on the server side with no limitation CWE-770. ruby runs = request.params'profilerruns' ||...

Stealthy BLOODALCHEMY Malware Targeting ASEAN Government Networks

Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to be a successor to ShadowPad. "The origin of BLOODALCHEMY and Deed R...

Siemens SICAM Product Command Injection Vulnerability

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energ...

Siemens 多款产品 命令注入漏洞

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energ...

CVE-2023-51589

BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability ...

DEBIAN-CVE-2023-51589

BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability ...

DEBIAN-CVE-2023-51592

BlueZ Audio Profile AVRCP parsemediafolder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability i...

CVE-2023-51580

BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this...