EUVD-2018-8673

Malware in sbrugna...

EUVD-2008-5327

Malware in sbrugna...

EUVD-2013-2955

Malware in sbrugna...

EUVD-2022-45519

Malicious code in bioql PyPI...

EUVD-2023-41403

Malicious code in bioql PyPI...

git: Git GUI can create and overwrite files for which the user has write permission

A vulnerability was found in the git GUI package. When a user clones an untrusted repository and edits a file located in a maliciously named directory, git GUI may end up creating or overwriting arbitrary files for the running user has written permission. This flaw allows an attacker to modify th...

CVE-2020-5794

A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a specially constructed path in a specifically named user directory. The attacker needs valid credentia...

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2023-37516

CVE-2023-37516 affects HCL Leap; the root cause is missing no-cache headers, which permits caching of user directory information. The vulnerability is described with a CVSSv3.1 base score of 3.2 (LOW) with LOCAL attack vector, requiring user interaction and low privileges. There is no explicit ex...

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...

PT-2025-17854 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to missing "no cache" headers in HCL Leap, which allows user directory information to be cached. Recommendations: At the moment, there is no information about a newer...

SAP NetWeaver Application Server Information Disclosure Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP, which can be exploited by an attacker with administrative or user directory privileges to disclose data and compromise program...

CVE-2025-0056: Exposure of Sensitive System Information to an Unauthorized Control Sphere

SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data coul...

CVE-2025-0055: Exposure of Sensitive System Information to an Unauthorized Control Sphere

SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in...

OESA-2024-2580 socat security update

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...