Lucene search
K

101 matches found

Snyk
Snyk
added 2026/05/28 10:28 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the validatepathelementntfs function. An attacker can write arbitrary files and potentially execute code in the victim's user context by crafting malicious Git repositories with NTFS-hostile tree entries that are...

8.8CVSS6.4AI score
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в samba

A flaw was discovered in Samba, specifically in the vfsstreamsxattr module. In this module, uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content, which may include sensitive data, resulting in an information...

4.3CVSS7.2AI score0.00084EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в libgit2

A issue was discovered in libgit2 before versions 0.28.4 and 0.9x before version 0.99.0. path.c improperly handles equivalent filenames that exist due to NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...

9.8CVSS8.5AI score0.06011EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: libgit2 (UTSA-2026-017582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017582 advisory. An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. Th...

9.8CVSS7.4AI score0.07303EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.2 views

EulerOS Virtualization 2.12.0 : samba (EulerOS-SA-2026-1518)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data...

4.3CVSS5.8AI score0.00084EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/03/07 10:41 p.m.183 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 CVE-2025-8088 — Educational proof-of-concept for...

8.8CVSS6AI score0.11605EPSS
Exploits34
GithubExploit
GithubExploit
added 2026/02/14 2:10 a.m.131 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Explotación WinRAR Herramienta avanzada de...

8.8CVSS7.4AI score0.11605EPSS
Exploits34
GithubExploit
GithubExploit
added 2025/11/29 5:20 p.m.125 views

Exploit for Path Traversal in Rarlab Winrar

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS:...

8.8CVSS6.8AI score0.11605EPSS
Exploits34
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.4 views

Samba Information Disclosure (CVE-2025-9640)

In the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Note that Nessus has not tested for...

4.3CVSS6.3AI score0.00084EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/11/02 7:23 p.m.138 views

Exploit for Path Traversal in Rarlab Winrar

🧩 CVE-2025-8088 — WinRAR Zero-Day Vulnerability Type: Pat...

8.8CVSS8.1AI score0.11605EPSS
Exploits34
Amazon
Amazon
added 2025/10/27 12:0 a.m.4 views

Medium: samba

Issue Overview: A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure...

4.3CVSS6.1AI score0.00084EPSS
Exploits0
OSV
OSV
added 2025/10/21 7:17 p.m.3 views

JLSEC-2025-182 An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0

An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...

9.8CVSS8.2AI score0.06011EPSS
Exploits0References14
OSV
OSV
added 2025/10/15 1:16 p.m.2 views

ALPINE-CVE-2025-9640

A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...

4.3CVSS5.8AI score0.00084EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 1:16 p.m.2 views

CVE-2025-9640

A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...

4.3CVSS0.00084EPSS
Exploits0References6
OSV
OSV
added 2025/10/15 1:16 p.m.2 views

DEBIAN-CVE-2025-9640

A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...

4.3CVSS6AI score0.00084EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/15 12:47 p.m.6 views

CVE-2025-9640 Samba: vfs_streams_xattr uninitialized memory write possible

A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...

4.3CVSS0.00084EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/15 12:47 p.m.2 views

EUVD-2025-34611

A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...

4.3CVSS5.3AI score0.00084EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-1479

Malware in sbrugna...

2.1CVSS6.4AI score0.0038EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-4343

Malware in sbrugna...

4CVSS8.2AI score0.06902EPSS
Exploits0References26
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-4591

Malware in sbrugna...

9.8CVSS9.2AI score0.06011EPSS
Exploits0References8
Rows per page
Query Builder