9310 matches found
CVE-2025-62511 yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation
yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...
CVE-2025-57567: Improper Control of Generation of Code
A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...
CVE-2025-62511: Time-of-check Time-of-use (TOCTOU) Race Condition
yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...
PT-2025-42651
Name of the Vulnerable Software and Affected Versions yt-grabber-tui version 1.0 Description yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. A Time-of-Check to Time-of-Use TOCTOU race condition exists in the creation of the default configuration file...
CVE-2025-62156
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...
CVE-2025-62156 argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...
CVE-2025-62156
Argo Workflows (versions
CVE-2025-62156 argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...
CVE-2025-62156
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...
SUSE SLES15 Security Update : podman (SUSE-SU-2025:03584-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03584-1 advisory. - CVE-2025-9566: fixed an issue in kube play command that could cause overwriting host files bsc1249154 Tenable has extracted the preceding...
PT-2025-41843
Name of the Vulnerable Software and Affected Versions SAP Print Service SAPSprint affected versions not specified Description SAP Print Service SAPSprint does not adequately validate path information provided by users. This allows an unauthenticated attacker to traverse directories and overwrite...
Security update for podman
This update for podman fixes the following issues: CVE-2025-9566: fixed an issue in kube play command that could cause overwriting host files bsc1249154 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
RockyLinux 9 : podman (RLSA-2025:15900)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:15900 advisory. podman: Podman kube play command may overwrite host files CVE-2025-9566 Tenable has extracted the preceding description block directly from the RockyLinux securi...
EUVD-2012-2173
Malware in sbrugna...
EUVD-1999-0132
Malware in sbrugna...
EUVD-2004-0283
Malware in sbrugna...
EUVD-2006-2632
Malware in sbrugna...
EUVD-2007-1494
Malware in sbrugna...