Linux Distros Unpatched Vulnerability : CVE-2026-67325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers ca...

CVE-2026-67325

creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egscm4b2z 2026-08-01 22:19:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ittk7ee2d 2026-08-03 04:36:04+00:00| seen|...

DEBIAN-CVE-2026-67325

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...

CVE-2026-67325

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...

CVE-2026-67325 GitPython before 3.1.51 Command Injection via option prefix abbreviation

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...

CVE-2026-67325

GitPython before 3.1.51 is vulnerable to a command injection issue due to an incomplete blocklist that does not account for git’s long-option prefix abbreviation. Attackers can bypass the unsafe options guard by using abbreviated option names (for example, upload_p instead of upload_pack); Git re...

CVE-2025-67325

creationtimestamp| type| source ---|---|--- 2026-01-08 19:51:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwqxzpsrf27 2026-01-08 20:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwtihaakn22...

CVE-2025-67325

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...

CVE-2025-67325

CVE-2025-67325 is an unrestricted file upload vulnerability in QloApps, affecting version 1.7.0 and earlier within the hotel review feature. The issue allows remote unauthenticated attackers to achieve remote code execution (RCE). Public advisories corroborate the RCE potential; evidence of a PoC...