335 matches found
rsync: Path traversal vulnerability in rsync
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...
CVE-2023-53777
In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...
CVE-2023-53777 erofs: kill hooked chains to avoid loops on deduplicated compressed images
In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...
JLSEC-2025-326 A path traversal vulnerability exists in rsync
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...
[SECURITY] Fedora 43 Update: uv-0.9.7-2.fc43
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
[SECURITY] Fedora 43 Update: uv-0.9.5-1.fc43
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
CVE-2025-59206
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59210
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
EUVD-2025-34389
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
EUVD-2025-34290
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59210
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59210
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59206
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59206
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
CVE-2025-59210
CVE-2025-59210 affects Windows Resilient File System (ReFS) Deduplication Service and enables local elevation of privileges. Base metrics show CVSS v3.1: Local, High impact (C/H), no user interaction required, with total impact on confidentiality, integrity, and availability. Microsoft’s October ...
CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
CVE-2025-59206
CVE-2025-59206 affects the Windows Resilient File System (ReFS) Deduplication Service. The vulnerability is an elevation of privilege (PrivEsc) issue that can be exploited locally to obtain increased rights. The CVSS metrics in the initial entry indicate LOCAL access, high impact on confidentiali...