Design/Logic Flaw

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...

CVE-2022-36555

CVE-2022-36555 affects Hytec Inter HWL-2511-SS, versions 1.05 and below. The root cause is a SHA512crypt implementation for the root account that can be cracked via brute-force, allowing unauthorized root access. Public sources confirm the vulnerability in the device firmware and describe the imp...

CVE-2022-36554

CVE-2022-36554 describes a command-injection vulnerability in the CLI of Hytec Inter HWL-2511-SS, affecting versions 1.05 and below. The issue allows attackers to run arbitrary commands with root privileges via the affected CLI. Public documents in the connected set confirm the vulnerability and ...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

CVE-2022-36555

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...

CVE-2022-36553

Hytec Inter HWL-2511-SS (v1.05 and earlier) is affected by an unauthenticated remote command-injection vulnerability in /www/cgi-bin/popen.cgi. Exploitation could allow arbitrary command execution with high impact on confidentiality, integrity, and availability. Public references (NVD/NIST) docum...

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in the Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from the component /www/cgi-bin/popen.cgi containing a command injection...

Hytec Inter HWL-2511-SS 加密问题漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in the Hytec Inter HWL-2511-SS v1.05 and earlier, which originates from a root account that can be easily cracked via brute force attack...

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from a CLI that allows attackers to execute arbitrary commands with root privileges...

Malicious code in ss-loaoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ec3e73738b2c07875c310ceb73a6d5089c1549e9203bc74a94ce7aaa6e6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6279 Malicious code in ss-loaoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ec3e73738b2c07875c310ceb73a6d5089c1549e9203bc74a94ce7aaa6e6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6653 Malicious code in trinity-pkg-ss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa8616c6c7ac8d9a61dc6a76dbb1f9465b03f2bac5fe4fc4fe4decbf4140461 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6074 Malicious code in shakt-pkg-ss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 037b8feaca6fc29f0d42067efc0aa636aac015008505b6bf7e369c436df1fd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trinity-pkg-ss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa8616c6c7ac8d9a61dc6a76dbb1f9465b03f2bac5fe4fc4fe4decbf4140461 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shakt-pkg-ss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 037b8feaca6fc29f0d42067efc0aa636aac015008505b6bf7e369c436df1fd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ss-link2000.com Cross Site Scripting vulnerability OBB-2641386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ss-defi.com Cross Site Scripting vulnerability OBB-2641385

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new packages: hunspell-ss

An update is available for hunspell-ss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-J696-6M57-MCRV Silverstripe CMS XSS Vulnerability

SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by 1 the Insert Media option in the content editor or 2 an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017...

Silverstripe CMS XSS Vulnerability

SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by 1 the Insert Media option in the content editor or 2 an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017...