hauler-1.2.2-1.1 on GA media (moderate)

hauler-1.2.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14996-1 Rating: moderate Cross-References: CVE-2024-0406 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the hauler-1.2.2-1.1...

Exploit for Path Traversal in Mholt Archiver

CVE-2024-0406 Proof of Concept PoC This repository contains...

CVE-2024-0406 vulnerabilities

Vulnerabilities for packages: terragrunt, mattermost, zarf, filebrowser, wolfictl, nuclei, datadog-agent, k9s, kots, kubescape...

CVE-2024-0406 vulnerabilities

Vulnerabilities for packages: k9s, kubescape, mattermost-fips, zarf, datadog-agent-fips, datadog-agent, mattermost, wolfictl, nuclei, vault, kots, terragrunt, chainctl, filebrowser, gotenberg...

CVE-2024-0406 Mholt/archiver: path traversal vulnerability

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

CVE-2024-0406

creationtimestamp| type| source ---|---|--- 2024-02-01 19:01:53+00:00| seen| https://t.me/ctinow/177740 2025-01-14 14:03:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lfpg4tm6kb2j 2025-01-14 14:34:04+00:00| seen|...

CVE-2024-0406

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...