225 matches found
EUVD-2024-55068
Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can cause the mintty process to access a file in a specific path. It is triggered by simply printing them out on bash. An attacker can specify an arbitrary network path, negotiate an...
CVE-2025-43414
A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...
CVE-2025-43414
A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...
EUVD-2019-7410
Malware in sbrugna...
EUVD-2004-1446
Malware in sbrugna...
EUVD-2012-4672
Malware in sbrugna...
EUVD-2015-1450
Malware in sbrugna...
EUVD-2019-11069
Malware in sbrugna...
EUVD-2020-21917
Malware in sbrugna...
EUVD-2018-5982
Malware in sbrugna...
EUVD-2021-17109
Malware in sbrugna...
EUVD-2009-0719
Malware in sbrugna...
EUVD-2011-4504
Malware in sbrugna...
EUVD-2008-0254
Malware in sbrugna...
EUVD-2005-1067
Malware in sbrugna...
EUVD-2018-20716
Malware in sbrugna...
EUVD-2017-9552
Malware in sbrugna...
GHSA-M42M-M8CR-8M58 LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...