Lucene search
K

135 matches found

Snyk
Snyk
added 2026/03/10 1:4 a.m.0 views

Malicious Package

Overview xc-input-toggle is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2026/03/10 1:4 a.m.0 views

MAL-2026-1316 Malicious code in xc-input-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bd6a138ac384a0c310614cf8a679db9c7c02f9b4b44fbfb98910514eb2e80e The package xc-input-toggle was found to contain malicious code. Source: ghsa-malware aa8d4ebd389bd00b1f92bc14e6d9e1a2ffc83e2ef239991e0e01c0bb445166c...

5.7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/10 1:4 a.m.2 views

Malicious code in xc-input-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bd6a138ac384a0c310614cf8a679db9c7c02f9b4b44fbfb98910514eb2e80e The package xc-input-toggle was found to contain malicious code. Source: ghsa-malware aa8d4ebd389bd00b1f92bc14e6d9e1a2ffc83e2ef239991e0e01c0bb445166c...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/01/29 12:48 a.m.1 views

CGA-HP42-XC84-GHF7

Bulletin has no description...

6.5CVSS6.6AI score0.03694EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/12/03 5:2 p.m.1 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

4.1CVSS6.8AI score0.00016EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/03 5:2 p.m.5 views

CVE-2025-59699

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader...

6.8CVSS7.1AI score0.00041EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/03 5:1 p.m.2 views

CVE-2025-59698

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...

6.8CVSS7.1AI score0.00041EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/02 3:30 p.m.3 views

EUVD-2025-200255

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader...

6.6AI score0.00041EPSS
Exploits1References3
NVD
NVD
added 2025/12/02 3:15 p.m.1 views

CVE-2025-59705

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01...

6.8CVSS0.00041EPSS
Exploits1References2
OSV
OSV
added 2025/12/02 3:15 p.m.2 views

CVE-2025-59696

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...

3.2CVSS5.8AI score0.00142EPSS
Exploits8References2
NVD
NVD
added 2025/12/02 3:15 p.m.3 views

CVE-2025-59702

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components...

7.2CVSS0.00035EPSS
Exploits1References2
OSV
OSV
added 2025/12/02 3:15 p.m.0 views

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing th...

9.8CVSS5.8AI score0.00094EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.1 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in the Entrust nShield Connect XC that originates from a physical neighbor attacker having untraceable access to internal components of the device...

9.1CVSS6.4AI score0.00064EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.2 views

PT-2025-48707

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...

7.8CVSS7AI score0.00006EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.1 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker who can edit the Legacy GRUB boot configuration to obtain a root shell...

7.2CVSS6.4AI score0.00035EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/02 12:0 a.m.3 views

CVE-2025-59704

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password...

6.8AI score0.00006EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates in a physical neighbor attacker who can enable the USB port by inserting a chassis probe to elevate privileges during system...

6.8CVSS6.5AI score0.00041EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.2 views

PT-2025-48706

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from t...

6.8AI score0.00064EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48695

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...

7.1AI score0.00041EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.1 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker who can modify or delete tampering events...

3.2CVSS6.5AI score0.00021EPSS
Exploits1References4
Rows per page
Query Builder