pyxdg Arbitrary File Overwrite via Race Condition

Race condition in the xdg.BaseDirectory.getruntimedir function in pyxdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the...

PT-2022-10096

Name of the Vulnerable Software and Affected Versions SharpZipLib versions 1.0.0 through 1.3.2 Description The issue affects SharpZipLib, a library for handling Zip, GZip, Tar, and BZip2 files. A check was added to ensure the destination file is under the destination directory, but it does not...

SharpZipLib 路径遍历漏洞

SharpZipLib ziplib, formerly known as NZipLib is an open source C compression and decompression library from the ICSharpCode Icsharpcode team for the .NET platform, which supports decompression and compression of Zip, GZip, BZip2, Tar and other formats. SharpZipLib has a security vulnerability th...