89 matches found
Malicious code in mep-ul-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d593c7ae7f8e32d4a74e793a97c54a82aba7a8e9123c55be97c8b4c254ce96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1609 Malicious code in mep-ul-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d593c7ae7f8e32d4a74e793a97c54a82aba7a8e9123c55be97c8b4c254ce96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2024-6345 via setuptools (63.4.2)
setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...
Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-22041: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been identified in Cerberus PRO EN Engineering Tool All versions, Cerberus PRO EN Fire Panel FC72x IP6 All versions, Cerberus PRO EN Fire Panel FC72x IP7 All versions, Cerberus PRO EN Fire Panel FC72x IP8 All versions IP8 SR4, Cerberus PRO EN X200 Cloud Distribution IP7 All...
ka-ul-lis-ridges.com Improper Access Control vulnerability OBB-3802356
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Bootiful Podcast: UL Systems founder and chairman Shigeru Urushibara interviews.. me?
Hi, Spring fans! I just crossed 13 years on the Spring team! I just got to spend a lovely day in the presence of one of my heroes and friends, UL Systems founder and chairman, Shigeru Urushibara-san @ulsystems, here in Tokyo, Japan, and in this episode, we sort of flip the script. We had a brief...
Malicious Package
Overview ul-mailru is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2022-40897 via setuptools (63.4.2)
setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...
MAL-2022-6766 Malicious code in ul-mailru (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ffb34853ca2aed2129272732bcaa389eb9243a502f86a14ddd4cd744d9827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ul-mailru (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ffb34853ca2aed2129272732bcaa389eb9243a502f86a14ddd4cd744d9827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
faried-ul-islam.nl Improper Access Control vulnerability OBB-2423555
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-44149
An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write...
[SECURITY] Fedora 31 Update: pure-ftpd-1.0.49-5.fc31
Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...
Toshiba VFAS3-4185PCE ASD Drive Detection
Binary data 757963.prm...
Toshiba VFAS3-4110PCE ASD Drive Detection
Binary data 757961.prm...
Mitsubishi FX2N-8ER-ES/UL Digital I/O Module Detection
Binary data 751942.prm...
Mitsubishi FX2N-8EX-UA1/UL Digital I/O Module Detection
Binary data 751945.prm...