EUVD-2013-4255

Malware in sbrugna...

EUVD-2018-8239

Malware in sbrugna...

EUVD-2024-2459

Malicious code in bioql PyPI...

EUVD-2021-27989

Malicious code in bioql PyPI...

EUVD-2024-1644

Malicious code in bioql PyPI...

EUVD-2025-22923

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-7625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation...

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

...

PT-PoC

PoC: Path Traversal in CPython's multissltests.py This re...

Linux Distros Unpatched Vulnerability : CVE-2019-20805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment. CVE-2019-20805 Note that Nessus relies on the...

CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

GO-2025-3767 OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr...

CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

CVE-2025-54531

CVE-2025-54531 affects JetBrains TeamCity prior to 2025.07. The issue is a path traversal vulnerability introduced by Windows plugin unpacking, allowing unauthorized access to files via crafted paths. Documented impact is high/critical, with CVSS metrics indicating local and network factors depen...

CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

USN-7633-1 nix vulnerabilities

Linus Heckemann discovered that Nix did not correctly handle certain binaries. An attacker could possibly use this issue to execute arbitrary code. CVE-2024-38531 Pierre-Etienne Meunier discovered that Nix did not correctly handle TLS certificates. A remote attacker could possibly use this issue ...

CVE-2025-31359

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 55879. This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation...

Time-of-check Time-of-use (TOCTOU) Race Condition

github.com/containerd/containerd is a Time-of-check Time-of-use TOCTOU Race Condition. The vulnerability is due to insufficient validation of image contents between the time of verification and the time of use during image unpacking, allowing malicious images to modify the host file system...