CVE-2026-110102

The Powerlevel10k shell theme (versions through 1.20.0 ) contains an insecure download vulnerability within the gitstatus/install script. The flaw is caused by the script using curl -k to disable TLS certificate verification and omitting integrity checks when a SHA-256 utility is unavailable. A n...

CVE-2026-110102 powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can intercept the github.com mirror request and...

MGASA-2024-0363 Updated libarchive packages fix security vulnerability

A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. CVE-2024-20696...

ZrLog code-related vulnerabilities

ZrLog is a blogging system developed using the Java language. A command execution vulnerability exists in ZrLog version 2.2.2, which can be exploited by an attacker to execute any JAR file...

CiviCRM code-related vulnerabilities

CiviCRM is an open source, cloud-based member relationship management CRM system developed specifically to meet the needs of nonprofit and association-based organizations. A code issue vulnerability exists in CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3 versions, which allows an...