CVE-2022-21695 Improper Access Control in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users or unauthenticated in public mode can send messages without being visible in the list of chat participants. Th...

CVE-2022-21695 Improper Access Control in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users or unauthenticated in public mode can send messages without being visible in the list of chat participants. Th...

CVE-2022-21688

Removed by vendor...

CVE-2022-21696

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

PYSEC-2022-47

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

Design/Logic Flaw

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

CVE-2022-21696

On OnionShare, a trailing-space condition in usernames allows impersonation via the chat rename feature. The issue arises from handling of username input (improper input sanitization), enabling an adversary with access to the chat environment to impersonate another participant by appending whites...

CVE-2022-21696 Username spoofing in OnionShare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

OnionShare 授权问题漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that...

OnionShare 安全漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability, and no details of the vulnerability are available...

OnionShare 路径遍历漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability that could be exploited by attackers to compromise sensitive data...

The vulnerability of the SMB protocol implementation within the in-core CIFS/SMB3-server ksmbd server for Linux operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB protocol implementation within the in-core CIFS/SMB3 server ksmbd server for Linux operating systems is related to the transmission of data in an open manner when the SMB2GLOBALCAPENCRYPTION flag is used. Exploiting this vulnerability can allow a remote attacker to ga...

ksmbd 安全漏洞

ksmbd is an open source kernel CIFS/SMB3 server created by Namjae Jeon for the Linux kernel. It is an implementation of the SMB/CIFS protocol in kernel space for sharing files and IPC services over a network. A security vulnerability exists in ksmbd server 3.4.2 and earlier versions, which result...

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

Design/Logic Flaw

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

PT-2021-23728 · Kaseya · Kaseya Unitrends Backup Appliance

Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Samba file sharing service, allowing anonymous read/write access. Recommendations: For versions prior to 10.5.5, update to version 10.5.5 o...

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

CVE-2021-43039

Affected product: Kaseya Unitrends Backup Appliance (prior to 10.5.5). Issue: Samba file sharing service allows anonymous read/write access, enabling potential unauthorized file creation/editing on vulnerable deployments. Root cause: misconfig/ flaw in Samba access on the Appliance leading to una...

WordPress Easy Download Manager and File Sharing plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress Easy Download Manager and File Sharing plugin has a cross-site scripting vulnerability in versions prior ...