787 matches found
EUVD-2000-0859
Malware in sbrugna...
EUVD-2000-0701
Malware in sbrugna...
EUVD-1999-0878
Malware in sbrugna...
EUVD-2000-0173
Malware in sbrugna...
EUVD-2000-0468
Malware in sbrugna...
EUVD-2003-0411
Malware in sbrugna...
BIT-GOLANG-2025-47906 Unexpected paths returned from LookPath in os/exec
If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...
DEBIAN-CVE-2025-47906
If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...
CVE-2025-47906
The os/exec package in the Go programming language is vulnerable to a flaw where the LookPath function may return unexpected binaries. If the PATH environment variable contains paths to executables instead of directories, providing specific strings like "", ".", or ".." can result in the return o...
Use of Incorrectly-Resolved Name or Reference
Overview std/os/exec is a Go standard library package std/os/exec Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference. Go Vulnerability Report: If the PATH environment variable contains paths which are executables rather than just directories, passing...
CVE-2025-36114 IBM QRadar SOAR Plugin App path traversal
IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2025-36114 IBM QRadar SOAR Plugin App path traversal
IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
PT-2025-34063
Name of the Vulnerable Software and Affected Versions: IBM QRadar SOAR Plugin App versions 1.0.0 through 5.6.0 Description: The IBM QRadar SOAR Plugin App may allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot”...
Linux Distros Unpatched Vulnerability : CVE-2021-27919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which...
VulnCheck KEV: CVE-2024-48914
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...
CVE-2024-51453
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2023-24960
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 246333...
CVE-2011-4948
Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...