Lucene search
+L

607 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in test-mlw2-sudds-sains-kitty-jubas (npm)

The package test-mlw2-sudds-sains-kitty-jubas was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in test-mlw2-sykes-kitty (npm)

The package test-mlw2-sykes-kitty was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-8974 Malicious code in @malware-test-sudds-sains-kitty-jubas/test-mlw3-sudds-sains-kitty-jubas (npm)

The package @malware-test-sudds-sains-kitty-jubas/test-mlw3-sudds-sains-kitty-jubas was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-36391 Malicious code in test-mlw2-sykes-kitty (npm)

The package test-mlw2-sykes-kitty was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-36368 Malicious code in test-mlw2-sudds-sains-kitty-jubas (npm)

The package test-mlw2-sudds-sains-kitty-jubas was found to contain malicious code...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/06/02 12:0 a.m.11 views

Debian dla-4203 : kitty - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4203 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4203-1 [email protected] https://www.debian.org/lts/security/...

7.8CVSS7.6AI score0.00481EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2025/06/02 12:0 a.m.6 views

Debian: Security Advisory (DLA-4203-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00481EPSS
SaveExploits1References2
Debian
Debian
added 2025/06/01 9:27 a.m.6 views

[SECURITY] [DLA 4203-1] kitty security update

Debian LTS Advisory DLA-4203-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost June 01, 2025 https://wiki.debian.org/LTS Package : kitty Version : 0.19.3-1+deb11u1 CVE ID : CVE-2022-41322 Debian Bug : 1020582 A vulnerability has been found in kitty, a fast, featurefu...

7.8CVSS7.2AI score0.00481EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2025/05/26 12:0 a.m.4 views

Fedora: Security Advisory (FEDORA-2024-d2ec3e14a7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00446EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/05/26 12:0 a.m.4 views

Fedora: Security Advisory (FEDORA-2025-756c627691)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS6.7AI score0.00385EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
added 2025/05/23 9:45 a.m.10 views

CVE-2024-25003

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution...

7.8CVSS7.7AI score0.01815EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:42 a.m.8 views

CVE-2024-23749

KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls at lines 2369-2390. This allows an attacker to add inputs inside the...

7.8CVSS7.7AI score0.04692EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:13 a.m.8 views

CVE-2024-25004

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization at line 2600. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution...

7.8CVSS7.7AI score0.01777EPSS
SaveExploits3References1
SUSE CVE
SUSE CVE
added 2025/04/23 2:37 a.m.5 views

SUSE CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS6.8AI score0.00184EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2025/04/20 3:15 a.m.3 views

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS9.6AI score0.00184EPSS
SaveExploits1References5
NVD
NVD
added 2025/04/20 3:15 a.m.65 views

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS0.00184EPSS
SaveExploits1References5
OSV
OSV
added 2025/04/20 3:15 a.m.3 views

DEBIAN-CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS4.9AI score0.00184EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/20 3:15 a.m.22 views

UBUNTU-CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/04/20 12:0 a.m.4 views

kitty 安全漏洞

kitty is a Python-based GPU terminal emulation software by Kovid Goyal, an individual developer in India. The software provides basic terminal functionality and GPU-based rendering reduces system load, uses OpenGL for rendering, and can be supported on Linux and Mac. A security vulnerability exis...

7.8CVSS5.3AI score0.00184EPSS
SaveExploits1References6
OSV
OSV
added 2025/04/20 12:0 a.m.30 views

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

4.1CVSS6.8AI score0.00184EPSS
SaveExploits1References7
Rows per page
Query Builder