CVE-2024-49871 Input: adp5589-keys - fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm action to call adp5589clearconfig and then pass the i2c client as argument so that we can call i2cgetclientdata in order to get our device object. However,...

CVE-2024-49871 Input: adp5589-keys - fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm action to call adp5589clearconfig and then pass the i2c client as argument so that we can call i2cgetclientdata in order to get our device object. However,...

CVE-2024-47743

In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in findasymmetrickey In findasymmetrickey, if all NULLs are passed in the id0,1,2 arguments, the kernel will first emit WARN but then have an oops because id2 gets dereferenced anyway. Add t...

CVE-2024-47743 KEYS: prevent NULL pointer dereference in find_asymmetric_key()

In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in findasymmetrickey In findasymmetrickey, if all NULLs are passed in the id0,1,2 arguments, the kernel will first emit WARN but then have an oops because id2 gets dereferenced anyway. Add t...

CVE-2024-47743

CVE-2024-47743 affects the Linux kernel in the KEYS subsystem. In find_asymmetric_key(), if id_{0,1,2} are all NULL, a WARN is emitted but a null dereference on id_2 occurs, leading to an oops. The vulnerable code is fixed by adding the missing id_2 NULL check and by moving WARN_ON() to the final...

CVE-2024-47743

In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in findasymmetrickey In findasymmetrickey, if all NULLs are passed in the id0,1,2 arguments, the kernel will first emit WARN but then have an oops because id2 gets dereferenced anyway. Add t...

Unauthenticated local file disclosure on Milesight DeviceHub

TL;DR Nginx container on Milesight DeviceHub includes MQTT private key store Can download MQTT private keys across network Milesight eventually responded and issued a firmware update Unauthenticated local file disclosure on Milesight DeviceHub CVSS: 6.5 Medium CVSS:3.1:...

MAL-2024-9444 Malicious code in google-drive-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b852e689dbc27ffdc82219196cc1caf6535bfe509fb8fdf6fab98a642c019c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference issue in the KEYS subsystem findasymmetrickey function...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference issue in the adp5589-keys driver in the Input subsystem...

MAL-2024-9434 Malicious code in wagmi-connectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1849feb5a54edcfb0734af9c632f95290165ddd026b3a748050d2b136f9d3fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9435 Malicious code in wagmi-toolkits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0afc9a26ff350f8149860e0e41b730b5079f6c62ea1014a907b2d92dd83e29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9433 Malicious code in jungle-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da3fed264588f5c8f7d67b38a5bc2eeab345106c1b087c0ca7a369806fab9bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10100

A path traversal vulnerability exists in binary-husky/gptacademic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encoding. This allows attackers to view any file on the host system, including sensitive files such as...

Malicious code in ethers-mew (npm)

The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...

MAL-2024-9426 Malicious code in jifa-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c700c6936dcb6a2eb1fbff5232aa1305e7e989c7ce3ce5ef847c3efc413f04e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9315 Malicious code in 7qt8hl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbd79d7a9dbbe62f3ddb18022c026a13ce104cd8164073cf50519b6ee8f2922b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9326 Malicious code in agl9v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78e20d511a34d24103b62f848d649aa633dd8a711dfa83942fd04b045ee216aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9374 Malicious code in kald0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b0a25465a0ec47537a56aa181edb7f3959f7a20b971d8d6d388f89783cc590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9398 Malicious code in y7s8cl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72379719b4462ccdede2c2e51482fbe44f00b5316c34d06906c0c0b036953214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...