[SECURITY] Fedora 36 Update: golang-github-shurcool-vfsgen-0-0.12.20210113git0d455de.fc36

Package Vfsgen takes an http.FileSystem likely at go generate time and generates Go code that statically implements the provided http.FileSystem...

[SECURITY] Fedora 36 Update: golang-github-rakyll-statik-0.1.7-9.fc36

Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...

[SECURITY] Fedora 36 Update: golang-github-markbates-pkger-0.17.1-6.fc36

Pkger is a tool for embedding static files into Go binaries. It will, hopeful ly, be a replacement for github.com/gobuffalo/packr/v2...

CVE-2022-35630

A cross-site scripting XSS issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35630

A cross-site scripting XSS issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2...

PT-2022-5542 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The vulnerability is related to the handling of SetStaticRouteIPv4Settings requests in the web management portal of D-Link DIR-1935 routers. It allows network-adjacent attackers to execute arbitrary...

PT-2022-5533 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the handling of SetStaticRouteIPv4Settings requests in the web management portal, specifically when parsing subelements within the StaticRouteIPv4Data element. The process does...

[SECURITY] Fedora 35 Update: kiln-0.3.1-3.fc35

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

[SECURITY] Fedora 35 Update: golang-honnef-tools-2021.1-2.fc35

honnef.co/go/tools/... is a collection of tools and libraries for working with Go code, including linters and static analysis, most prominently staticcheck...

[SECURITY] Fedora 35 Update: golang-github-shurcool-vfsgen-0-0.11.20210113git0d455de.fc35

Package Vfsgen takes an http.FileSystem likely at go generate time and generates Go code that statically implements the provided http.FileSystem...

[SECURITY] Fedora 35 Update: golang-github-pquerna-ffjson-0-0.9.20200730gitaa0246c.fc35

Ffjson generates static MarshalJSON and UnmarshalJSON functions for structures in Go. The generated functions reduce the reliance upon runtime reflection to do serialization and are generally 2 to 3 times faster. In cases where ffjson doesn't understand a Type involved, it falls back to...

[SECURITY] Fedora 35 Update: golang-github-markbates-pkger-0.17.1-5.fc35

Pkger is a tool for embedding static files into Go binaries. It will, hopeful ly, be a replacement for github.com/gobuffalo/packr/v2...

CVE-2022-28377

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...

CVE-2022-28377

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...

CVE-2022-28371

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...

CVE-2022-28371

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...

CVE-2022-28377

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...

CVE-2022-28371

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...

Default credentials

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...

Design/Logic Flaw

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...