Lucene search
K

10 matches found

OSV
OSV
added 2025/12/09 7:37 p.m.0 views

CVE-2025-66214 Ladybug has an XMLDecoder Deserialization Vulnerability (Java RCE)

Ladybug adds message-based debugging, unit, system, and regression testing to Java applications. Versions prior to 3.0-20251107.114628 contain the APIs /iaf/ladybug/api/report/storage and /iaf/ladybug/api/report/upload, which allow uploading gzip-compressed XML files with user-controllable conten...

7CVSS6AI score0.00249EPSS
Exploits1References3
EUVD
EUVD
added 2025/12/09 7:37 p.m.1 views

EUVD-2025-202310

Ladybug adds message-based debugging, unit, system, and regression testing to Java applications. Versions prior to 3.0-20251107.114628 contain the APIs /iaf/ladybug/api/report/storage and /iaf/ladybug/api/report/upload, which allow uploading gzip-compressed XML files with user-controllable conten...

7CVSS6.8AI score0.00249EPSS
Exploits1References1
Fedora
Fedora
added 2024/03/07 10:33 p.m.15 views

[SECURITY] Fedora 40 Update: nom-tam-fits-1.15.2-22.fc40

FITS Flexible Image Transport System is the standard data format in astronomy used for the transport, analysis, and archival storage of scientific data sets. This library provides efficient I/O for FITS images and binary tables. All basic FITS formats and GZIP compressed files are supported...

8.8CVSS6.9AI score0.46427EPSS
Exploits3
Fedora
Fedora
added 2022/07/30 1:55 a.m.13 views

[SECURITY] Fedora 36 Update: go-bindata-3.0.7-23.gita0ff256.fc36

A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...

0.6AI score
Exploits0
Fedora
Fedora
added 2022/07/20 1:40 a.m.24 views

[SECURITY] Fedora 35 Update: go-bindata-3.0.7-22.gita0ff256.fc35

A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...

9.3CVSS0.6AI score0.00963EPSS
Exploits4
OSV
OSV
added 2022/03/04 12:0 p.m.0 views

RUSTSEC-2022-0103 Incorrect signature verification on gzip-compressed install images

The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...

7.8CVSS6.9AI score0.00099EPSS
Exploits0References4
RustSec
RustSec
added 2022/03/04 12:0 p.m.1 views

Incorrect signature verification on gzip-compressed install images

The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...

7.8CVSS7AI score0.00099EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2020/06/23 12:0 a.m.13 views

Fedora: Security Advisory for libjcat (FEDORA-2020-eec60309f2)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6CVSS6.4AI score0.00007EPSS
Exploits1References2
Zero Day Initiative
Zero Day Initiative
added 2015/07/01 12:0 a.m.27 views

Apple OS X GZIP DMG Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DMG...

4.9CVSS6.6AI score0.00575EPSS
Exploits0References1
0day.today
0day.today
added 2014/10/28 12:0 a.m.48 views

HttpCombiner ASP.NET - Remote File Disclosure Vulnerability

Exploit for asp platform in category web applications Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability Google Dork: filetype:txt intext:HttpCombiner.ashx Date: 2014-10-10 Exploit Author: Hoang Anh Thai Vendor Homepage:...

7.1AI score
Exploits0
Rows per page
Query Builder