CVE-2023-48426

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426

CVE-2023-48426 affects u-boot and is tied to a buffer overflow in memory that allows access to the u-boot shell and triggering interrupts over UART. The practical impact described across sources is the potential to bypass secure boot mechanisms. Affected component: u-boot (bootloader). Exact vuln...

Malicious code in u-workflow.auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d832a1e0e53f214bdd5e2066f8bdfad1a477ae82de0049f234f15e1a30807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1189 Malicious code in u-workflow.module.common.visibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6dcf3beecd86989a7b3a417a5bf6ae97e3b29c18583b6022dcf50a8a1ec988a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1188 Malicious code in u-workflow.module.common.tech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4612413a50009733ba8d6cd5ca56bc35c097a48862df442bcbc41453cf437da0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1187 Malicious code in u-workflow.auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d832a1e0e53f214bdd5e2066f8bdfad1a477ae82de0049f234f15e1a30807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

u-turn.in Cross Site Scripting vulnerability OBB-3890948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1158 Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in u-workflow.module.common.features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43c063fa58fdcf0f64acc12e433390c9dc078ab6b6eb6dd773242db454f29a47 The OpenSSF Package Analysis project identified 'u-workflow.module.common.features' @ 1.0.1 npm as malicious. It is considered malicious because...

MAL-2024-1131 Malicious code in u-workflow.module.common.webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676ec2bf7328ac16d28e24c3bb40fca880b4161a25988951f815eb86c0598b95 The OpenSSF Package Analysis project identified 'u-workflow.module.common.webapp' @ 1.0.0 npm as malicious. It is considered malicious because: ...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2019-6268

Summary : CVE-2019-6268 affects RAD SecFlow-2 devices (Hardware 0202; Firmware 4.1.01.63; U-Boot 2010.12). The vulnerability is a directory traversal via URIs starting with /.., allowing access to OS files (demonstrated reading /etc/shadow). Public docs report CVSS v3.1 base score 7.5 (HIGH) and ...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

openssh: potential command injection via shell metacharacters

A flaw was found in OpenSSH. In certain circumstances, a remote attacker may be able to execute arbitrary OS commands by using expansion tokens, such as %u or %h, with user names or host names that contain shell metacharacters...

n-e-r-v-o-u-s.com Cross Site Scripting vulnerability OBB-3857032

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...