33959 matches found
DEBIAN-CVE-2025-8959
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8959
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8959
CVE-2025-8959 affects HashiCorp’s go-getter library: the subdirectory download feature is vulnerable to symlink attacks that can cause unauthorized reads outside the designated directory. The root cause is improper path resolution when following symlinks in subdirectory downloads. Impact is unaut...
HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
Summary HashiCorp’s go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9. Background HashiCorp’s go-getter is a...
CVE-2024-10219
An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints...
CVE-2025-8912
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...
PT-2025-33508
Name of the Vulnerable Software and Affected Versions: go-getter versions prior to 1.7.9 Description: The go-getter library subdirectory download feature is susceptible to symlink attacks, potentially allowing unauthorized read access beyond the intended directory boundaries. Recommendations:...
Linux Distros Unpatched Vulnerability : CVE-2025-6032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue...
CVE-2025-8959: Improper Link Resolution Before File Access
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-55169
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/downloadremessa.php endpoint. This vulnerability could allow an attacker to...
MAL-2025-21998 Malicious code in grunt-smart-download (npm)
The package grunt-smart-download was found to contain malicious code...
MAL-2025-13906 Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)
The package a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca was found to contain malicious code...
MAL-2025-13907 Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)
The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...
MAL-2025-15141 Malicious code in avail-able-albu-m-down-load-2014-21052-the-inevitable-end-box51-pznqrt (npm)
The package avail-able-albu-m-down-load-2014-21052-the-inevitable-end-box51-pznqrt was found to contain malicious code...
MAL-2025-17885 Malicious code in cydia-download (npm)
The package cydia-download was found to contain malicious code...
MAL-2025-26795 Malicious code in mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu (npm)
The package mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu was found to contain malicious code...