57 matches found
Zeek-Intelligence-Feeds
Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
Impact The toabsolutenormalizedpath function security.lua:28-43 does not collapse redundant path separators // → /. On Linux, //etc/passwd is equivalent to /etc/passwd POSIX path semantics, but iscriticalpath fails to match the double-slash variant because //etc/passwd does not start with /etc/...
PT-2026-60673
Impact The to absolute normalized path function security.lua:28-43 does not collapse redundant path separators // → /. On Linux, //etc/passwd is equivalent to /etc/passwd POSIX path semantics, but is critical path fails to match the double-slash variant because //etc/passwd does not start with...
SUSE CVE-2026-41526
In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path t...
CVE-2026-41526
In KDE KCoreAddons prior to 6.25, the KShell::quoteArgs function intended to safely quote arguments for shell commands does not correctly handle metacharacters, enabling possible shell escapes. The issue affects applications using this path to process user input in security-critical contexts, not...
Fiber security feature vulnerabilities
Fiber is Fiber open source an open source Web framework written in Go language . Fiber suffers from a security signature issue vulnerability. The vulnerability stems from an error not returned by the UUID function and can be exploited by an attacker to use predictable or low entropy identifiers i...
EUVD-2017-11112
Malware in sbrugna...
EUVD-2024-33696
Malicious code in bioql PyPI...
EUVD-2025-10395
Malicious code in bioql PyPI...
EUVD-2024-32311
Malicious code in bioql PyPI...
EUVD-2025-14977
Malicious code in bioql PyPI...
EUVD-2025-11234
Malicious code in bioql PyPI...
EUVD-2025-9063
Malicious code in bioql PyPI...
EUVD-2023-23715
Malicious code in bioql PyPI...
EUVD-2025-21381
Malicious code in bioql PyPI...
EUVD-2023-0386
Malicious code in bioql PyPI...
EUVD-2025-21299
Malicious code in bioql PyPI...
CVE-2025-8522
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity o...
PT-2025-31466
Name of the Vulnerable Software and Affected Versions openviglet shio versions through 0.3.8 Description A critical vulnerability exists in openviglet shio up to version 0.3.8. This issue affects the shStaticFilePreUpload function located in the file...
CVE-2025-7896
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function downloadvideo/deletevideo of the file app/controllers/v1/video.py. The manipulation leads to path traversal. The attack can be launched remotely...