4365 matches found
Exploit for CVE-2025-63307
CVE-2025-63307 – Authenticated Stored Cross-site Scripting XS...
EulerOS 2.0 SP13 : git (EulerOS-SA-2025-2256)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-2256)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-11966
In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path...
kernel: nfsd: don't ignore the return code of svc_proc_register()
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...
PT-2025-45950
An issue was discovered in GNOME GLib before 2.66.8. When g file replace is used with G FILE CREATE REPLACE DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the...
CVE-2025-62511 yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation
yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...
YtGrabber-TUI 安全漏洞
YtGrabber-TUI is the interface of a software by the individual developer of Женя Бородин. A security vulnerability exists in YtGrabber-TUI version 1.0, which stems from a TOCTOU competition condition during the creation of the default configuration file config.json, which could lead to arbitrary...
Argo Workflows 路径遍历漏洞
Argo Workflows is an open source container-native workflow engine for Kubernetes from the Argo project. A path traversal vulnerability exists in Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2, which stems from a Zip Slip path traversal vulnerability in the artifact...
Security update for git
This update for git fixes the following issues: Update to 2.51.0: CVE-2025-27613: arbitrary writable file creation and truncation in Gitk bsc1245938 CVE-2025-27614: arbitrary script execution via repo clonation in gitk bsc1245939 CVE-2025-46835: untrusted repository cloning can lead to arbitrary...
AlmaLinux 10 : git (ALSA-2025:11533)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11533 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...
CLSA-2025-1759864289 git: Fix of CVE-2025-46835
CVE-2025-46835: prevent malicious creating and overwriting of user's files...
EUVD-1999-1303
Malware in sbrugna...
EUVD-1999-0051
Malware in sbrugna...
EUVD-1999-0061
Malware in sbrugna...
EUVD-1999-0049
Malware in sbrugna...
EUVD-2012-2946
Malware in sbrugna...
EUVD-2012-3000
Malware in sbrugna...