1398 matches found
CVE-2025-11490
A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from...
CVE-2025-8917
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
EUVD-2006-6080
Malware in sbrugna...
EUVD-2007-0924
Malware in sbrugna...
EUVD-2019-4328
Malware in sbrugna...
EUVD-2021-26908
Malware in sbrugna...
EUVD-2005-1599
Malware in sbrugna...
EUVD-2006-4864
Malware in sbrugna...
EUVD-2008-6304
Malware in sbrugna...
EUVD-2011-0764
Malware in sbrugna...
EUVD-2014-0031
Malware in sbrugna...
EUVD-2020-0031
Malware in sbrugna...
Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680607)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680607 advisory. LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For...
Directory Traversal
Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...
EUVD-2025-32454
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files...
CVE-2025-8917 Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
EUVD-2022-34960
Malicious code in bioql PyPI...