A vulnerability was found in Siemens SINEMA Remote Connect Server up to 3.1. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Web Service. The manipulation leads to improper access controls.
Thi…
A vulnerability was found in Siemens Cerberus PRO EN Engineering Tool, Cerberus PRO EN Fire Panel FC72x, Cerberus PRO EN X200 Cloud Distribution, Cerberus PRO EN X300 Cloud Distribution, Sinteso FS20 EN Engineering Tool, Sinteso FS20 EN Fire Panel FC20…
Threat hunters have discovered a set of seven packages on the Python Package Index (PyPI) repository that are designed to steal BIP39 mnemonic phrases used for recovering private keys of a cryptocurrency wallet.
The software supply chain atta…
While I was doing source code review of API handlers for REST APIs, I found a security issue.
This issue is that some methods have the annotation @PreAuthorize("permitAll()").
If I want to document this as a finding and give it a…
Is there any example for data that has the same sha256sum value?
Or is it impossible to find out with current computational power?
In a world of ever-expanding jargon, adding another FLA (Four-Letter Acronym) to your glossary might seem like the last thing you’d want to do. But if you are looking for ways to continuously reduce risk across your environment while making significant…
A vulnerability was found in Zoom Rooms Client on Windows. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to race condition.
This vulnerability is traded as CVE-2024-24692. The…
A vulnerability was found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.5.0 and classified as problematic. This issue affects some unknown processing of the component Service Restart. The manipulation lead…
A vulnerability has been found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.5.0 and classified as critical. This vulnerability affects the function charging. The manipulation leads to uninitialized pointe…
A vulnerability, which was classified as problematic, was found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.5.0. This affects an unknown part. The manipulation leads to cleartext transmission of sensitiv…
