45 matches found
bun-archive-traversal-poc
Bun Archive Extraction Traversal PoCs Target: oven-sh/bun...
GHSA-Q9PW-VMHH-384G PraisonAI has an SSRF bypass
Summary The URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current PraisonAI project uses validateurl to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...
CVE-2026-32044
OpenClaw versions prior to 2026.3.2 contain an archive extraction vulnerability in the tar.bz2 installer path that bypasses safety checks enforced on other archive formats. Attackers can craft malicious tar.bz2 skill archives to bypass special-entry blocking and extracted-size guardrails, causing...
OpenClaw has Zip Slip path traversal in tar archive extraction
Summary OpenClaw versions before 2026.2.14 did not sufficiently validate TAR archive entry paths during extraction. A crafted archive could use path traversal sequences for example ../../... to write files outside the intended destination directory Zip Slip. Affected Packages / Versions - Package...
CVE-2019-12841
Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2018.2.2...
Security Bulletin: IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682.
Summary IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-59681 DESCRIPTION: An issue was discovered in Django 4.2 before 4.2.25,...
EUVD-2019-0666
Malware in sbrugna...
EUVD-2021-1587
Malware in sbrugna...
EUVD-2021-11289
Malware in sbrugna...
EUVD-2012-0076
Malware in sbrugna...
EUVD-2017-11021
Malware in sbrugna...
EUVD-2018-14342
Malware in sbrugna...
EUVD-2022-51275
Malicious code in bioql PyPI...
EUVD-2021-8878
Malicious code in bioql PyPI...
EUVD-2022-2044
Malicious code in bioql PyPI...
EUVD-2023-52172
Malicious code in bioql PyPI...
EUVD-2024-19960
Malicious code in bioql PyPI...
EUVD-2022-1241
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-55188
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip before 25.01 does not always properly handle symbolic links during extraction. CVE-2025-55188 Note that Nessus relies on the presence of the package as...
Security update for python313
This update for python313 fixes the following issues: CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. CVE-2025-4435:...