252551 matches found
AZL-107963 CVE-2026-108119 affecting package busybox 1.36.1-27
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
MGASA-2026-0473 Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-108119
A flaw exists in the Busybox tar applet where deferred link-creation handling for symlinks and hardlinks fails to validate that the resolved destination remains within the extraction directory. An attacker can craft a tar archive using a symlink target of .. combined with a deferred hardlink to c...
CVE-2026-108119 Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-98311
A flaw was found in the Linux kernel's virtwifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory...
CVE-2026-107815
A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to...
CVE-2026-107814
A flaw was found in MariaDB. The dedicated database service account was configured using the database data directory as its home directory. An authenticated database user with file-writing privileges could place malicious startup scripts into this directory. This could result in arbitrary code...
CVE-2026-102992
A flaw was found in piscina. This vulnerability allows an attacker to achieve arbitrary code execution by leveraging inherited configuration options. The worker pool stores options in a standard object that inherits base JavaScript properties without defining defaults for all sensitive parameters...
SUSE CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
MAL-2026-17807 Malicious code in py2ops (PyPI)
The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...
Malicious code in py2ops (PyPI)
The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...
Rascals Angio deserialization injection vulnerability
Rascals Angio versions 1.1.1 and earlier contain a deserialization injection vulnerability. This vulnerability allows subscriber users to trigger PHP object injection, potentially leading to arbitrary code execution...
WordPress GeoDirectory code injection vulnerability
WordPress GeoDirectory 2.8.187 and earlier versions have a code injection vulnerability. This vulnerability stems from the designtype parameter, which involves local file inclusion. It may allow unauthenticated attackers to include and execute any.php file on the server, thereby bypassing access...
The 4 Kalles deserialization injection vulnerability
The 4 Kalles 1.1.7.1 and earlier versions have a deserialization injection vulnerability. This vulnerability arises from unvalidated attacks by attackers who can perform PHP object injections, potentially allowing them to execute arbitrary code...