Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

SUSE-SU-2025:02491-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

Security update 5.0.5 for Multi-Linux Manager Client Tools

This update fixes the following issues: salt: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal vulnerability in...

CVE-2025-43881

Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1. If exploited, a denial of service DoS condition may be caused by an attacker who can log in to the administrative page of the affected product...

Real-time Bus Tracking System vulnerable to improper validation of specified quantity in input

Overview Real-time Bus Tracking System provided by SYNCK GRAPHICA contains the following vulnerability. Improper validation of specified quantity in input CWE-1284 - CVE-2025-43881 n3ddih reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2025-43881

Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1. If exploited, a denial of service DoS condition may be caused by an attacker who can log in to the administrative page of the affected product...

CVE-2025-43881

Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1. If exploited, a denial of service DoS condition may be caused by an attacker who can log in to the administrative page of the affected product...

CVE-2025-43881

CVE-2025-43881 affects Real-time Bus Tracking System prior to version 1.1. The vulnerability is due to improper validation of a specified quantity in input, enabling a DoS when an attacker can log in to the administrative page. Impact is a denial of service with availability affected (per CVSS/Re...

SYNCK GRAPHICA Real-time Bus Tracking System 安全漏洞

SYNCK GRAPHICA Real-time Bus Tracking System is a real-time bus tracking system from SYNCK GRAPHICA, Japan. A security vulnerability exists in SYNCK GRAPHICA Real-time Bus Tracking System versions prior to 1.1, which stems from improper validation of input quantities and could lead to a denial of...

PT-2025-30522 · Unknown · Real-Time Bus Tracking System

Name of the Vulnerable Software and Affected Versions: Real-time Bus Tracking System versions prior to 1.1 Description: Improper validation of the specified quantity in input exists in the Real-time Bus Tracking System. If exploited, an attacker who can access the administrative page of the...

JVN#21177718: Real-time Bus Tracking System vulnerable to improper validation of specified quantity in input

Real-time Bus Tracking System provided by SYNCK GRAPHICA contains the following vulnerability. Improper validation of specified quantity in input CWE-1284 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Base Score 4.3...

PT-2025-30582 · Deepin · Lastore-Daemon

Name of the Vulnerable Software and Affected Versions: lastore-daemon versions 0.9.53-1 through 0.9.66-1 Description: A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Linux. The D-Bus configuration permits any user in the sudo...

USN-7654-4 linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

📄 Discourse 3.1.1 Unauthenticated Chat Message Access

Proof of concept exploit for Discourse version 3.1.1 that provides unauthenticated chat message access. !/usr/bin/env ruby Title : Discourse 3.1.1 - Unauthenticated Chat Message Access CVE-2023-45131 CVSS: 7.5 High Affected: Discourse 3.1.1 stable, 3.2.0.beta2 Author ibrahimsql @...

kernel: Linux kernel (i2c Tegra): Information disclosure or denial of service via SMBUS block read with invalid length

A flaw was found in the Linux kernel's i2c Tegra driver. A local attacker with high privileges could exploit this vulnerability by providing a specially crafted SMBUS System Management Bus block read message with an invalid length. This could lead to an out-of-bounds read, potentially resulting i...

CLSA-2025-1753083608 Fix of 17 CVEs

Focal update: v5.4.292 upstream stable release LP: 2109357 // CVE-url: https://ubuntu.com/security/CVE-2025-37937 - objtool, media: dib8000: Prevent divide-by-zero in dib8000setdds Focal update: v5.4.287 upstream stable release LP: 2095145 // CVE-url: https://ubuntu.com/security/CVE-2024-53197 -...

kernel: Linux kernel (i2c Tegra): Information disclosure or denial of service via SMBUS block read with invalid length

A flaw was found in the Linux kernel's i2c Tegra driver. A local attacker with high privileges could exploit this vulnerability by providing a specially crafted SMBUS System Management Bus block read message with an invalid length. This could lead to an out-of-bounds read, potentially resulting i...

CANDoSA: a Hardware Performance Counter-Based Intrusion Detection System for DoS Attacks on Automotive CAN Bus

The Controller Area Network CAN protocol, essential for automotive embedded systems, lacks inherent security features, making it vulnerable to cyber threats, especially with the rise of autonomous vehicles. Traditional security measures offer limited protection, such as payload encryption and...