EUVD-2020-30427

Malware in sbrugna...

EUVD-2019-17672

Malware in sbrugna...

EUVD-2019-15094

Malware in sbrugna...

EUVD-2019-18191

Malware in sbrugna...

EUVD-2021-14136

Malware in sbrugna...

EUVD-2020-30374

Malware in sbrugna...

EUVD-2015-5114

Malware in sbrugna...

EUVD-2021-19521

Malware in sbrugna...

EUVD-2020-27112

Malware in sbrugna...

EUVD-2018-3661

Malware in sbrugna...

EUVD-2006-6961

Malware in sbrugna...

EUVD-2010-1355

Malware in sbrugna...

EUVD-2013-4149

Malware in sbrugna...

EUVD-2020-22809

Malware in sbrugna...

EUVD-2005-2537

Malware in sbrugna...

UBUNTU-CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume th...

CVE-2025-8406

ZenML 0.83.1 is affected by a path traversal flaw in PathMaterializer during data.tar.gz extraction; is_path_within_directory fails to catch symbolic/hard links, enabling arbitrary file writes and potential command execution if critical files are overwritten. Remediation present in connected docs...

CVE-2025-8406 Path Traversal in zenml-io/zenml

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...

CVE-2025-8406 Path Traversal in zenml-io/zenml

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...