EulerOS 2.0 SP13 : python-pip (EulerOS-SA-2026-1226)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP...

MiracleLinux 8 : firefox-128.2.0-1.el8_10.ML.1 (AXSA:2024-8869:31)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8869:31 advisory. firefox: 115.15/128.2 ESR mozilla: Type confusion when looking up a property name in a with block CVE-2024-8381 mozilla: Internal event interfaces...

MiracleLinux 7 : ocaml-4.01.0-22.7.el7 (AXSA:2016-530:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-530:01 advisory. Security issues fixed with this release: CVE-2015-8869 OCamel before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct...

MiracleLinux 4 : libguestfs-1.20.11-20.0.1.AXS4 (AXSA:2017-1635:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1635:01 advisory. Libguestfs is a library for accessing and modifying guest disk images. Amongst the things this is good for: making batch configuration changes to guests,...

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2026-1099)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-12-CVE-2025-8869 CVE-2025-8869 in rootio-python-pip - Patched by Root

Root has patched CVE-2025-8869 in the rootio-python-pip package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-8869

creationtimestamp| type| source ---|---|--- 2025-12-14 08:52:53+00:00| seen| https://gist.github.com/LavrukhinaV/c5dec5c8620e117b91092bb60d984a6c 2025-12-14 19:03:16+00:00| seen| https://gist.github.com/skyreaper925/07a25adb281d1f64c2224318485ae6b8 2025-12-21 19:31:57+00:00| seen|...

CVE-2025-8869 affecting package python-pip for versions less than 24.2-4

CVE-2025-8869 affecting package python-pip for versions less than 24.2-4. A patched version of the package is available...

Medium: python3.11-pip

Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...

CVE-2025-8869 vulnerabilities

Vulnerabilities for packages: py3-pip, py3-virtualenv, reflex, airflow, request-1276, graalvm, py3-pip-wheel-bootstrap, py3.9-pip, nvidia-nsight-compute-13.2, mlflow, py3-cassandra-medusa, nvidia-nsight-compute-13.3, localstack, nvidia-nsight-compute-13.1...

Linux Distros Unpatched Vulnerability : CVE-2025-8869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that...

CVE-2025-8869

When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python versi...

MAL-2025-8869 Malicious code in @malware-test-pures-dater-oasts-slaty/test-mlw3-pures-dater-oasts-slaty (npm)

The package @malware-test-pures-dater-oasts-slaty/test-mlw3-pures-dater-oasts-slaty was found to contain malicious code...

CVE-2024-8869

creationtimestamp| type| source ---|---|--- 2024-09-15 14:15:53+00:00| seen| https://t.me/cvedetector/5696...

CVE-2024-8869 TOTOLINK A720R exportOvpn os command injection

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult...

Joomla Account Creation And Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Account Creation and Privilege Escalation', 'Description' = %q This module creates an arbitrary account with administrative privileges in...

CGA-X458-W4C8-8869

Bulletin has no description...

CVE-2019-8869

creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:55+00:00| seen| https://t.me/cibsecurity/70513...

Ubuntu: Security Advisory (USN-4778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (puppet-firewall) (RHSA-2022:8869)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8869 advisory. Manages Firewalls such as iptables Security Fixes: unmanaged rules could leave system in an unsafe state via duplicate comment CVE-2022-0675 For more...