EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1332)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1296)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

gurk (aka gurk-rs) mishandles ANSI escape sequences

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

GHSA-89XP-C3MQ-QJ84 gurk (aka gurk-rs) mishandles ANSI escape sequences

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089: Improper Neutralization of Escape, Meta, or Control Sequences

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

gurk 安全漏洞

gurk is a terminal signaling messenger client for boxdot individual developers. A security vulnerability exists in gurk 0.6.3 and earlier versions that stems from improper handling of ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

The CVE-2025-30089 entry applies to gurk (aka gurk-rs) up to version 0.6.3, which is reported to mishandle ANSI escape sequences. The vulnerability is described with a base CVSS v3.1 score of 5.4 (Network attack vector, high attack complexity, no privileges, no user interaction, scope Changed, Co...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

PT-2025-11448

Name of the Vulnerable Software and Affected Versions gurk aka gurk-rs versions 0.6.3 and earlier Description The issue is related to the mishandling of ANSI escape sequences in gurk aka gurk-rs. There is no information provided about the estimated number of potentially affected devices worldwide...

USN-7350-1 unrar-nonfree vulnerabilities

It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write arbitrary files outside of the targeted directory. CVE-2022-30333, CVE-2022-48579 It...

CVE-2025-27111

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

CVE-2025-0823

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-0823: Improper Limitation of a Pathname to a Restricted Directory

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2024-54169

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2024-56477

IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...