159221 matches found
DEBIAN-CVE-2026-68766
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...
DEBIAN-CVE-2026-63310
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
DEBIAN-CVE-2026-66393
NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...
DEBIAN-CVE-2026-65915
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...
DEBIAN-CVE-2026-63312
NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...
DEBIAN-CVE-2026-62384
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...
DEBIAN-CVE-2026-62388
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
DEBIAN-CVE-2026-62385
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
DEBIAN-CVE-2026-62383
nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can place a symlink in the corpus root directory and read arbitrary files accessible to the process by calling channels,...
CVE-2026-76606
creationtimestamp| type| source ---|---|--- 2026-08-22 15:02:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amxzpg76lgeoj 2026-08-22 16:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtongfmfbz25 2026-08-22 16:07:56+00:00| seen|...
CVE-2026-76571
creationtimestamp| type| source ---|---|--- 2026-08-22 14:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5qqwbyjjfirhz 2026-08-22 15:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtomcmkrhf23 2026-08-22 16:07:23+00:00| seen|...
MINI-RJWX-FR3P-HM5W
Bulletin has no description...
MINI-JRWV-RVM3-FWCW
Bulletin has no description...
MINI-8RM4-FMMX-7M6X
Bulletin has no description...
MINI-728J-J2MP-MWMP
Bulletin has no description...
DEBIAN-CVE-2026-71513
NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...
MINI-C3G5-FC3R-CGC9
Bulletin has no description...
MINI-JMVH-RV58-QVGR
Bulletin has no description...