CVE-2025-6465 Path traversal in image upload with preview overwrite

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs...

PT-2025-34258 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.8.x through 10.8.3 Mattermost versions 10.5.x through 10.5.8 Mattermost versions 10.10.x through 10.10.0 Mattermost versions 10.9.x through 10.9.3 Description: The application fails to sanitize file names, potentially...

External Control of File Name or Path

Overview @directus/api is a real-time API and App dashboard for managing SQL database content Affected versions of this package are vulnerable to External Control of File Name or Path via the write and join method, which used the fullPath method to create the absolute path. An attacker can upload...

WordPress plugin ZoloBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin WP Travel Gutenberg Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Houzez 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Photon OS 5.0: Git PHSA-2025-5.0-0590

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0590. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid25227...

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2025-9007

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007

The CVE-2025-9007 issue affects Tenda CH22 (version 1.0.0.1). The vulnerability is in the formeditFileName function located in /goform/editFileName, where improper validation of input length/size leads to a buffer overflow. It can be exploited remotely, and publicly disclosed PoCs/exploits exist....

Linux Distros Unpatched Vulnerability : CVE-2025-5272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so...

Malicious code in file-alb-um-zip-new-mp3-200499-threads-i0tvt-cdrrmq (npm)

The package file-alb-um-zip-new-mp3-200499-threads-i0tvt-cdrrmq was found to contain malicious code...

MAL-2025-20542 Malicious code in file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk (npm)

The package file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk was found to contain malicious code...

MAL-2025-20537 Malicious code in file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak (npm)

The package file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak was found to contain malicious code...

MAL-2025-20544 Malicious code in file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex (npm)

The package file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex (npm)

The package file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-283978-tim-melina-theo-bobby-bsdj4-wndzis (npm)

The package file-alb-um-zip-new-mp3-283978-tim-melina-theo-bobby-bsdj4-wndzis was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk (npm)

The package file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-38030-too-legit-to-quit-0d58y-hddhtz (npm)

The package file-alb-um-zip-new-mp3-38030-too-legit-to-quit-0d58y-hddhtz was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak (npm)

The package file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak was found to contain malicious code...