Malicious code in apachecn-sec-zh-pt2 (npm)

The package apachecn-sec-zh-pt2 was found to contain malicious code...

MAL-2025-43475 Malicious code in apachecn-sec-zh-pt2 (npm)

The package apachecn-sec-zh-pt2 was found to contain malicious code...

MAL-2025-44926 Malicious code in kssd-volyiyi-web-sec (npm)

The package kssd-volyiyi-web-sec was found to contain malicious code...

CVE-2023-21475

Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code...

PT-2025-35668

Name of the Vulnerable Software and Affected Versions: libaudiosaplus sec.so versions prior to SMR Apr-2023 Release 1 Description: An out-of-bounds write issue exists in the libaudiosaplus sec.so library. This can allow a local attacker to execute arbitrary code. Recommendations: Update...

The vulnerability of the Eichrecht() function in microprogrammed software-based modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, allows a intruder to manipulate data integrity and cause malfunctions in the operation of these devices.

The vulnerability of the Eichrecht function in microprogrammed software-based modular control devices for DC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from the copying of buffers witho...

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in insufficient validation of input data. This allows attackers to elevate their privileges to the root level.

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from insufficient validation of input data. Exploiting this vulnerability could...

UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia and other entities across the globe to advance Beijing's strategic interests. "This multi-stage attack chain leverages advanced social engineering including valid code signing...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

Malicious code in sec-learning (npm)

The package sec-learning was found to contain malicious code...

Malicious code in sj-tw-sec (npm)

The package sj-tw-sec was found to contain malicious code...

MAL-2025-32873 Malicious code in sec-learning (npm)

The package sec-learning was found to contain malicious code...

MAL-2025-33341 Malicious code in sj-tw-sec (npm)

The package sj-tw-sec was found to contain malicious code...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

Linux Distros Unpatched Vulnerability : CVE-2022-49745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks...

(Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the OCPP service. The issue result...

(Pwn2Own) Phoenix Contact CHARX SEC-3150 Origin Validation Error Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass firewall rules and access another interface on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of firewa...

(Pwn2Own) Phoenix Contact CHARX SEC-3150 Configuration Service Missing Authentication Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration service, which listens on TCP port 500...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the defaultroutemetric parameter to the...