Dell SupportAssist OS Recovery 安全漏洞

Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery Temporary File...

Linux Distros Unpatched Vulnerability : CVE-2019-11696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Files with the .JNLP extension used for Java web start applications are not treated as executable content for download prompts even though they can be executed ...

(0Day) Google Drive ZIP File Mark-of-the-Web Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Google Drive. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

FileBrowser Denial of Service Vulnerability

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a denial of service vulnerability , the vulnerability stems from a flaw in the file handling log...

CVE-2025-38409

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path putunusedfd doesn't free the installed file, if we've already done fdinstall. So we need to also free the syncfile. Patchwork: https://patchwork.freedesktop.org/patch/653583/...

USN-7664-1 ruby-sinatra vulnerabilities

It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining sensitive information. CVE-2022-29970 It was discovered that Sinatra incorrectly handled special characters in the Content-Disposition HTTP...

FileBrowser 安全漏洞

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a denial of service vulnerability , the vulnerability stems from a flaw in the file handling log...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via improper bounds checking in the process of binary file handling. An attacker can cause memory corruption or potentially execute arbitrary code by providing crafted input files. Remediation A fix was pushed into t...

webkitgtk: Copying a URL from Web Inspector may lead to command injection

A flaw was found in WebKitGTK. Copying a URL from Web Inspector may lead to command injection due to improper file handling...

SUSE-SU-2025:20452-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - Updated to 12.5.2: CVE-2025-22247: Fixed Insecure file handling bsc1243106...

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Updated to 12.5.2: CVE-2025-22247: Fixed Insecure file handling bsc1243106 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

novel-plus 安全漏洞

novel-plus is a novel reading software by xxy individual developer. A security vulnerability exists in novel-plus version 5.1.3 and earlier, which stems from improper control of resource identifiers in the file handling component and could lead to remote attacks...

CVE-2021-47688

CVE-2021-47688 affects WhiteBeam 0.2.0 through 0.2.1 (before 0.2.2). A local attacker on a server can bypass the allow-list by truncating a file in the OpenFileDescriptor action prior to VerifyCanWrite, enabling potential bypass of protections. Validated details from multiple sources confirm the ...

USN-7579-1: Godot Engine vulnerabilities

It was discovered that the Godot Engine did not properly handle certain malformed WebM media files. If the Godot Engine opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. CVE-2019-2126 It was discovered that the Godot Engin...

CVE-2025-6196

CVE-2025-6196 affects libgepub, a library used to read EPUB files. The underlying issue is an integer/size calculation problem in the EPUB archive handling, which can lead to oversized memory allocations and crash the application. Documented impact includes potential denial of service when parsin...

CVE-2025-6196 Libgepub: integer overflow in libgepub's epub archive handling

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like...

CVE-2025-6196 Libgepub: integer overflow in libgepub's epub archive handling

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like...

TencentOS Server 3: go-toolset (TSSA-2024:0311)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0311 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

BIT-GOLANG-2025-0913 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

Remote Code Execution (RCE)

.NET is vulnerable to Remote Code Execution RCE. The vulnerability is due to insecure file handling due to the ability of an attacker to place files in specific locations that can trigger execution of unintended code...