CVE-2025-11490

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from...

CVE-2025-8917

A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...

EUVD-2008-6304

Malware in sbrugna...

EUVD-2006-6080

Malware in sbrugna...

EUVD-2014-0031

Malware in sbrugna...

EUVD-2005-1599

Malware in sbrugna...

EUVD-2021-26908

Malware in sbrugna...

EUVD-2007-0924

Malware in sbrugna...

EUVD-2011-0764

Malware in sbrugna...

EUVD-2006-4864

Malware in sbrugna...

EUVD-2019-4328

Malware in sbrugna...

EUVD-2020-0031

Malware in sbrugna...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680607 advisory. LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For...

clearml is vulnerable to Path Traversal through its `safe_extract` function

A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files...

Directory Traversal

Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...

EUVD-2025-32454

A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...

CVE-2025-8917

A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...

PT-2025-40805

Name of the Vulnerable Software and Affected Versions allegroai/clearml version v2.0.1 Description A flaw exists in the handling of symbolic and hard links within the safe extract function, leading to a path traversal issue. This can result in arbitrary file writes outside the intended directory...

EUVD-2024-46943

Malicious code in bioql PyPI...

EUVD-2025-20077

Malicious code in bioql PyPI...