29031 matches found
CVE-2025-8959
CVE-2025-8959 affects HashiCorp’s go-getter library: the subdirectory download feature is vulnerable to symlink attacks that can cause unauthorized reads outside the designated directory. The root cause is improper path resolution when following symlinks in subdirectory downloads. Impact is unaut...
HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
Summary HashiCorp’s go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9. Background HashiCorp’s go-getter is a...
CVE-2024-10219
An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints...
CVE-2025-8912
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...
PT-2025-33508
Name of the Vulnerable Software and Affected Versions: go-getter versions prior to 1.7.9 Description: The go-getter library subdirectory download feature is susceptible to symlink attacks, potentially allowing unauthorized read access beyond the intended directory boundaries. Recommendations:...
Linux Distros Unpatched Vulnerability : CVE-2025-6032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue...
CVE-2025-55169
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/downloadremessa.php endpoint. This vulnerability could allow an attacker to...
Malicious code in zip-mp3-a-lbum-do-wnload-new-82651-raskit-dbljd-cwdxrm (npm)
The package zip-mp3-a-lbum-do-wnload-new-82651-raskit-dbljd-cwdxrm was found to contain malicious code...
Malicious code in a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf (npm)
The package a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf was found to contain malicious code...
Malicious code in zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn (npm)
The package zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn was found to contain malicious code...
Malicious code in grunt-smart-download (npm)
The package grunt-smart-download was found to contain malicious code...
Malicious code in mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi (npm)
The package mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi was found to contain malicious code...
Malicious code in zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp (npm)
The package zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp was found to contain malicious code...
Malicious code in ava-ilable-down-load-mp3-today-33142-precious-falling-tmwor-vsvzvj (npm)
The package ava-ilable-down-load-mp3-today-33142-precious-falling-tmwor-vsvzvj was found to contain malicious code...
Malicious code in mp3-do-wnload-file-to-day-movement-aw881-vcidcm (npm)
The package mp3-do-wnload-file-to-day-movement-aw881-vcidcm was found to contain malicious code...
Malicious code in avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps (npm)
The package avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps was found to contain malicious code...
Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm)
The package down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf was found to contain malicious code...
Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)
The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...