pyxdg Arbitrary File Overwrite via Race Condition

Race condition in the xdg.BaseDirectory.getruntimedir function in pyxdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the...

PT-2022-10096

Name of the Vulnerable Software and Affected Versions SharpZipLib versions 1.0.0 through 1.3.2 Description The issue affects SharpZipLib, a library for handling Zip, GZip, Tar, and BZip2 files. A check was added to ensure the destination file is under the destination directory, but it does not...

SharpZipLib path traversal vulnerability

SharpZipLib ziplib, formerly known as NZipLib is an open source C compression and decompression library from the ICSharpCode Icsharpcode team for the .NET platform, which supports decompression and compression of Zip, GZip, BZip2, Tar and other formats. SharpZipLib has a security vulnerability th...