CVE-2024-40742

CVE-2024-40742 concerns a cross-site scripting (XSS) vulnerability in netbox v4.0.3. The issue arises from insufficient filtering/escaping of user-supplied data in the circuit ID parameter of the /circuits/circuits/add endpoint, allowing an attacker to inject arbitrary HTML/JS. The impact is that...

CVE-2024-40741

NetBox v4.0.3 is affected by an XSS vulnerability via the circuit ID parameter in /circuits/circuits/{id}/edit/. The root cause is insufficient filtering/escaping of user-supplied data in that parameter, allowing injection of arbitrary HTML/script into the page. Impact is limited to client-side e...

MAL-2024-2641 Malicious code in lua-circuit-breaker (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lua-circuit-breaker (npm)

--- -= Per source details. Do not edit below this line.=-...

kernel: i2c: validate user data in compat ioctl

In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2ctransfer, ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to...

kernel: use after free in i2c

An out-of-bounds OOB memory access flaw was found in the i2c driver module in the Linux kernel...

kernel: i2c: i801: Don't generate an interrupt on bus reset

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt...

kernel: use after free in i2c

An out-of-bounds OOB memory access flaw was found in the i2c driver module in the Linux kernel...

CLSA-2024-1716980150 Fix of 12 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free...

SUSE CVE-2021-47561

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect data on the I2C bus and/or memory corruptions in the guest since the device can still be operating on the buffers it was given while the guest...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a vulnerability in the i2c:core module...

UBUNTU-CVE-2024-35997

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...

FreeBSD : Arti -- Security issues related to circuit construction (f393b5a7-1535-11ef-8064-c5610a6efffb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f393b5a7-1535-11ef-8064-c5610a6efffb advisory. - In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards,...

CVE-2024-35313

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

CVE-2024-35313

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

CVE-2024-35313

CVE-2024-35313 affects Tor Arti prior to 1.2.3, where circuits may incorrectly have a length of 3 when full vanguards are used (aka TROVE-2024-004). The vulnerability is documented with CVSS v3.1 base score 7.3 (Network, High, Privileges=None, User Interaction=None; Confidentiality/Integrity/Avai...

Tor path lengths too short when "full Vanguards" configured

Description When building anonymizing circuits to or from an onion service with full vanguards enabled, the circuit manager code would build the circuits with one hop too few. Impact This makes users of this code more vulnerable to some kinds of traffic analysis when they run or visit onion...

Tor path lengths too short when "Vanguards lite" configured

Description When building anonymizing circuits to or from an onion service with 'lite' vanguards the default enabled, the circuit manager code would build the circuits with one hop too few. Impact This makes users of this code more vulnerable to some kinds of traffic analysis when they run or vis...

PT-2024-26429 · Tor · Tor Arti +1

Name of the Vulnerable Software and Affected Versions: Tor Arti versions prior to 1.2.3 Description: The issue arises when building anonymizing circuits to or from an onion service with 'lite' or 'full' vanguards enabled, where the circuit manager code builds the circuits with one hop too few. Th...

The vulnerability of the i2c_hid_of_probe() function in the HID driver for I2C devices in Linux kernels allows a hacker to cause a service failure.

The vulnerability of the i2chidofprobe function in the drivers/hid/i2c-hid/i2c-hid-of.c file of the HID device driver for I2C devices in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...