Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: e1000: fixed an out-of-bounds error in e1000tbishouldaccept In e1000tbishouldaccept, we read the last byte of the frame via “datalength - 1” to evaluate the TBI workaround. If the descriptor’s reported length is zero or greater...

e1000: fix OOB in e1000_tbi_should_accept()

...

CVE-2025-71093

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

CVE-2025-71093

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

CVE-2025-71093

CVE-2025-71093 affects the Linux kernel e1000 network driver. The issue was an out-of-bounds read in e1000_tbi_should_accept() where the code unconditionally dereferenced data[length-1] to perform a TBI workaround, potentially accessing memory beyond the RX buffer during NAPI receive path. The fi...

CVE-2025-71093 e1000: fix OOB in e1000_tbi_should_accept()

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

CVE-2025-71093

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

PT-2026-2614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the e1000 network driver, specifically in the e1000 tbi should accept function. This function improperly handles frame length validation,...

MAL-2024-11109 Malicious code in tbi-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3a7e82acc06456c6fd938b0e951d064648d71031c900bd9efa4e018d3575e3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tbi-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3a7e82acc06456c6fd938b0e951d064648d71031c900bd9efa4e018d3575e3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mojoPortal 跨站脚本漏洞

mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system offers event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

CVE-2023-24322: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

PT-2023-6553

Name of the Vulnerable Software and Affected Versions mojoPortal version 2.7.0.0 Description A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

jaarverslag.tbi.nl XSS vulnerability

Open Bug Bounty ID: OBB-608476 Description| Value ---|--- Affected Website:| jaarverslag.tbi.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...