223 matches found
MAL-2024-7771 Malicious code in express-jwt-v6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...
MAL-2024-2937 Malicious code in react-router-dom-v6 (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2024-3024
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...
Malicious code in cagov-template-v6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3e81e15d59085cf12a3a46a1dc253df8e81c9ff8756d76f8ab9db14b82caab8 The OpenSSF Package Analysis project identified 'cagov-template-v6' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...
AZL-38743 CVE-2023-45234 affecting package edk2 for versions less than 20240223gitedc6681206c1-1
EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or...
AZL-38590 CVE-2023-45230 affecting package edk2 for versions less than 20240223gitedc6681206c1-1
EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability...
Unraveling Real-Life Attack Paths – Key Lessons Learned
In the ever-evolving landscape of cybersecurity, attackers are always searching for vulnerabilities and exploits within organizational environments. They don't just target single weaknesses; they're on the hunt for combinations of exposures and attack methods that can lead them to their desired...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
Privilege escalation
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
CVE-2023-34833 describes an arbitrary file upload vulnerability in ThinkAdmin v6 at the /api/upload.php endpoint, enabling attackers to run arbitrary code via a crafted file. Affected product: ThinkAdmin v6; vulnerable component: /api/upload.php. Underlying issue: arbitrary file upload without pr...
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to the use of an outdated cryptographic algorithm, MD5. This vulnerability allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to the use of an outdated cryptographic algorithm, MD5. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information or cause service failures...
CVE-2023-23040
TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication...
CVE-2023-23040
TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication...
Malicious Package
Overview copy-webpack-plugin-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview strip-ansi-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2022-46287
Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script...
Baxter Spectrum 格式化字符串错误漏洞
Baxter Spectrum is an infusion pump from Baxter, Inc. A format string error vulnerability exists in the Baxter Spectrum WBM v20D29, which stems from vulnerability to a format string attack delivered via an application message, and can be used by an attacker to read memory in the WBM to access...