10557 matches found
GHSA-R936-GWX5-V52F Spring Framework MVC Applications Path Traversal Vulnerability
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
CVE-2025-41242
CVE-2025-41242 is a path traversal vulnerability in Spring Framework MVC when deployed on a non‑compliant Servlet container. An app is at risk if it is WAR‑deployed or uses an embedded container, the container does not reject suspicious URI sequences, and the app serves static resources via Sprin...
Third-Party Dependency in Crowd Data Center
Note: Aligning with our security bug fix policy|https://www.atlassian.com/trust/security/bug-fix-policy, this vulnerability has been fixed in our latest release only This Critical severity Third-Party Dependency vulnerability was introduced in version 6.1.1 of Crowd Data Center. This Third-Party...
Linux Distros Unpatched Vulnerability : CVE-2021-39293
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header falsely designating that many files are present can cause a NewReader or...
Linux Distros Unpatched Vulnerability : CVE-2021-27919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR Path Traversal Exploit PoC !PoC Demo...
CVE-2025-45317
A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...
Malicious code in recipe-archive (npm)
The package recipe-archive was found to contain malicious code...
MAL-2025-31903 Malicious code in recipe-archive (npm)
The package recipe-archive was found to contain malicious code...
MAL-2025-41011 Malicious code in zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz (npm)
The package zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz was found to contain malicious code...
MAL-2025-41016 Malicious code in zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln (npm)
The package zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln was found to contain malicious code...
MAL-2025-41007 Malicious code in zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy (npm)
The package zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy was found to contain malicious code...
Malicious code in zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe (npm)
The package zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe was found to contain malicious code...
MAL-2025-41004 Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)
The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...
MAL-2025-41008 Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm)
The package zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt was found to contain malicious code...
Security update for python3
This update for python3 fixes the following issues: CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705 CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249 Other fixes: - Limit...
EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2025-1958)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involve...
CVE-2011-10016
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...
CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...