4 matches found
EUVD-2026-39492
pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File Path Traversal...
CVE-2020-3924
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
CVE-2008-2942
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
PT-2008-4379
Name of the Vulnerable Software and Affected Versions Mercurial versions 1.0.1 through 1.0.1 Mercurial versions prior to 1.0.2 Description The issue allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file. This is due to a directory traversal...