6702 matches found
PT-2025-40992
Name of the Vulnerable Software and Affected Versions Time Machine affected versions not specified Description A path traversal issue exists in the Time Machine functionality because of inadequate input validation of two parameters. An authenticated user with limited privileges can potentially...
CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
CVE-2025-40889: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder...
PT-2025-41187
Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5 Description A specially designed shared deck can place a YouTube downloader executable in the media folder. This executable is then run when a YouTube link is present within the deck. The executable may be named...
CVE-2025-62185
In Ankitects Anki prior to 25.02.5, a crafted shared deck can place a YouTube downloader executable (names include youtube-dl.exe, yt-dlp.exe, or yt-dlp_x86.exe) in the media folder. This executable can be run when a YouTube link is present in the deck, enabling potential arbitrary code execution...
CVE-2025-62185
In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...
Improper Warning Message Handling
@anthropic-ai/claude-code is vulnerable to improper warning message handling. The vulnerability is due to an unclear trust prompt that failed to inform users that selecting “Yes, proceed” would execute files in the folder without further confirmation, which allows an attacker to trick users into...
CVE-2025-58590 Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...
EUVD-2025-27474
Malicious code in bioql PyPI...
EUVD-2024-34584
Malicious code in bioql PyPI...
EUVD-2025-7367
Malicious code in bioql PyPI...
EUVD-2022-32969
Malicious code in bioql PyPI...
EUVD-2024-23211
Malicious code in bioql PyPI...
EUVD-2022-52376
Malicious code in bioql PyPI...
EUVD-2025-16627
Malicious code in bioql PyPI...
EUVD-2022-44610
Malicious code in bioql PyPI...
EUVD-2022-3327
Malicious code in bioql PyPI...
EUVD-2025-25655
Malicious code in bioql PyPI...