886 matches found
ALPINE-CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...
AZL-60936 CVE-2025-46394 affecting package busybox 1.36.1-27
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...
AZL-61191 CVE-2025-46394 affecting package busybox 1.35.0-18
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...
UBUNTU-CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...
CVE-2025-46394
CVE-2025-46394 affects BusyBox tar up to version 1.37.0. A TAR archive can misuse terminal escape sequences to hide filenames from listings, causing a mismatch between on-disk contents and what is shown to the user. The vulnerability is a UI misinformation issue (CWE-451) with low overall impact ...
BusyBox 安全漏洞
BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox 1.37.0 and earlier versions, which originates from the fact that tar can hide filenames via terminal escape sequences...
CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...
PT-2025-17652
Name of the Vulnerable Software and Affected Versions BusyBox versions through 1.37.0 Description The issue allows local users to launch a network application with an argv0 containing an ANSI terminal escape sequence. This can lead to a denial of service when netstat is used by a victim, causing...
EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1332)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1296)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
CVE-2025-30089
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
GHSA-89XP-C3MQ-QJ84 gurk (aka gurk-rs) mishandles ANSI escape sequences
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
gurk (aka gurk-rs) mishandles ANSI escape sequences
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
CVE-2025-30089
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
gurk 安全漏洞
gurk is a terminal signaling messenger client for boxdot individual developers. A security vulnerability exists in gurk 0.6.3 and earlier versions that stems from improper handling of ANSI escape sequences...
CVE-2025-30089
The CVE-2025-30089 entry applies to gurk (aka gurk-rs) up to version 0.6.3, which is reported to mishandle ANSI escape sequences. The vulnerability is described with a base CVSS v3.1 score of 5.4 (Network attack vector, high attack complexity, no privileges, no user interaction, scope Changed, Co...
CVE-2025-30089
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
CVE-2025-30089
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
CVE-2025-30089
gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...
USN-7350-1 unrar-nonfree vulnerabilities
It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write arbitrary files outside of the targeted directory. CVE-2022-30333, CVE-2022-48579 It...