Commend WS203VICM

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION : Exploitable remotely/low attack complexity Vendor : Commend Equipment : WS203VICM Vulnerabilities : Argument Injection, Improper Access Control, Weak Encoding for Password 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Siemens SCALANCE W1750D

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-1432 DeepFaceLab main.py apply_xseg deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classified as problematic. This issue affects the function applyxseg of the file main.py. The manipulation leads to deserialization. The attack may be initiated remotely. The complexity of ...

astigmatismfix.com Cross Site Scripting vulnerability OBB-3849929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Rockwell Automation ControlLogix and GuardLogix

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix, GuardLogix Vulnerability : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of...

Hitron Systems Security Camera DVR

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor : Hitron Systems Equipment : DVR Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...

Mitsubishi Electric FA Engineering Software Products (Update D)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : EZSocket, FR Configurator2, GT Designer3 Version1GOT1000, GT Designer3 Version1GOT2000, GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, MX...

Malicious code in iifl_android_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156d2f7b729ecde4e57d57d93bf3462903c72250d963dd82e1d1a0518d4ff9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

okano-c.co.jp Improper Access Control vulnerability OBB-3843798

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in wlwz-2312-7408 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74692aa3192e2bfc9b1a6b362bc95991af14c909b53075a90bed3416dbcc5bb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb741da9a32478639c8b0ef3ca6670d55dc5148725d55b4a7b71dd676c0f6f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0903b9f5ca5aa7cfd4fab0e07d5368377a7912c85dd172d2c560e9fd30f8bbfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7c81bbc64564ec1735790e781e6cc3a4eb7572b8934c61f6516ebe3355fe99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5408 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a709dc420d2d28faae559ce0ec6382810f4f4c8a8bbd69395125a25235ecc88c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 095b6a15f07841d0f63e272f7a3e1343160051f5b050cdebdc189082d3b1216f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3200 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1498c161b0dfd829154402a4fa287ea7bc82ee9d6c49b6302626bf8079fe432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2303 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d08514817e036f4dabf908bb7fbc8967bed6f3e32b0c86311a74dc5640b99e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d8f0fd12caddfde7061c2a18a76e9c1120f04f696a7813cbf09dfccaf25432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92cdc6681213d94dd97f51721b70f35f814554f8a0c11ce82e45f73d9019704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8add08cde3ab9d753914e8d24a898068febbfd0d53038ba27e063e0a3f67bd98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...