10558 matches found
CVE-2025-63371
Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...
CVE-2025-63371
Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...
CVE-2025-63371
CVE-2025-63371 affects OneCommander 3.102.0.0. The vulnerability stems from the ZIP file processing component during extraction, enabling potential directory traversal via ZIP archive contents. Public documents consistently describe the flaw, but do not provide a confirmed fix version or remediat...
OneCommander 安全漏洞
OneCommander is a file manager from the individual developer Milos Paripovic. A security vulnerability exists in OneCommander version 3.102.0.0, which originates from a directory traversal in the ZIP file handling component...
CVE-2025-63371
Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...
CVE-2025-54770
creationtimestamp| type| source ---|---|--- 2025-11-18 17:41:26+00:00| seen| https://seclists.org/oss-sec/2025/q4/194 2025-11-18 21:36:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wp3nxw772n 2026-03-19 00:00:00+00:00| seen|...
Mattermost fails to properly restrict access to archived channel search API
Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in versions prior to Mattermost 11 that stems from a failure to properly restrict access to the archive channel search API, which could lead to the discovery of archived...
CVE-2025-12844
CVE-2025-12844 affects the WordPress plugin AI Engine (versions up to and including 3.1.8). It describes a PHP Object Injection via PHAR Deserialization in rest_simpleTranscribeAudio and rest_simpleVisionQuery. Impact is limited unless a PHP Object Injection (POP) chain exists in another plugin/t...
Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2022-48303)
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...
vim: Vim path traversial
A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...
EUVD-2025-82359
Malicious code in cook-tea-archive npm...
EUVD-2025-82552
Malicious code in cedric-tea-archive npm...
Malicious code in leonard-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a47cf3cfb8296867e4c8654c28fe9e57c0aac86074d3b40e4c02fe2635481b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81711
Malicious code in heath-tea-archive npm...
EUVD-2025-81889
Malicious code in flores-tea-archive npm...
Malicious code in pete-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6ce2d08d1ea692303e0a036355b4e58514e011c56c24183f74a27a0076b36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81479
Malicious code in jacobs-tea-archive npm...