5926 matches found
CVE-2025-9650: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
ROS-20250829-01
A vulnerability in the mount.cifs.c component of the CIFS network file system mount utility package cifs-utils of the Linux operating system is related to writing beyond buffer boundaries in memory. Exploitation exploitation of the vulnerability could allow an attacker to escalate his privileges...
MAL-2025-41933 Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41924 Malicious code in @rbacore/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in https-proxy-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Google Android rfc_utils.cc file memory misreference vulnerability
Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Google Android rfcutils.cc file, which can be exploited by an attacker to execute arbitrary code on the system...
CVE-2025-30061: Improper Neutralization of Special Elements used in an SQL Command
In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter...
CVE-2025-30040: Missing Authentication for Critical Function
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...
Linux Distros Unpatched Vulnerability : CVE-2022-21682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6...
Linux Distros Unpatched Vulnerability : CVE-2019-3689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including...
MAL-2025-47794 Malicious code in py-sys-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0f9d0b03bfee3afe8585a595eb40b5bb3d9d59db389bc864641b19aadd6bb764 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
PT-2026-54006
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.28 Description The software fails to detect malicious pickle files that utilize the torch.utils.collect env.run function within reduce methods. This allows attackers to embed hidden code in pickle files, which...
CLSA-2025-1755623284 Update of amazon-efs-utils
Bump release...
CLSA-2025-1755622959 Update of amazon-efs-utils
Bump release...
OPENSUSE-SU-2025:15461-1 aws-efs-utils-2.3.3-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...
Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?
In February 2024, after building trust over two years with project maintainers by making a significant volume of legitimate contributions, GitHub user "JiaT75" self-merged a version of the XZ Utils project containing a highly sophisticated, well-disguised backdoor targeting sshd processes running...