RockyLinux 9 : git (RLSA-2025:11462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11462 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...

EUVD-2025-17638

Malicious code in bioql PyPI...

EUVD-2025-7018

Malicious code in bioql PyPI...

EUVD-2025-13899

Malicious code in bioql PyPI...

EUVD-2024-50584

Malicious code in bioql PyPI...

EUVD-2025-30264

Malicious code in bioql PyPI...

EUVD-2024-51050

Malicious code in bioql PyPI...

EUVD-2024-34269

Malicious code in bioql PyPI...

EUVD-2024-34270

Malicious code in bioql PyPI...

EUVD-2022-0753

Malicious code in bioql PyPI...

EUVD-2023-35455

Malicious code in bioql PyPI...

EUVD-2024-39303

Malicious code in bioql PyPI...

EUVD-2022-44223

Malicious code in bioql PyPI...

EUVD-2022-44222

Malicious code in bioql PyPI...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

USN-7782-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled opening a file to write. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service CVE-2025-7462 It was discovered that Ghostscript incorrectly handled writing certain files. An attacker could...

SUSE CVE-2025-59342

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a...

Kea DHCP Path Traversal

The vulnerability of the open-source Kea DHCP server is related to incorrect external management of the file name or path. Exploiting this vulnerability can allow an attacker to gain write access to arbitrary files...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the streamhandler function in the file handler component when manipulating the key argument. An unauthenticated user can access sensitive information by sending specially crafted requests remotely. Details A...

ROS-20250925-03

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...