CVE-2025-21613

An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...

CVE-2025-21613

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

AZL-55094 CVE-2025-21613 affecting package packer for versions less than 1.9.5-7

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

DEBIAN-CVE-2025-21613

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

UBUNTU-CVE-2025-21613

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

CVE-2025-21613

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

CVE-2025-21613 go-git has an Argument Injection via the URL field

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

CVE-2025-21613: Improper Neutralization of Argument Delimiters in a Command

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

go-git 参数注入漏洞

go-git is go-git open source a highly extensible git implementation library written in pure Go. A parameter injection vulnerability exists in go-git versions prior to v5.13, which stems from the presence of a parameter injection vulnerability that could allow an attacker to set arbitrary values t...

org.jboss.narayana.rts:lra-test-arquillian-extension (6.0.0.final), org.wildfly:wildfly-galleon-pack (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (6.0.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 6.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-test-arquillian-extension 6.0.0.final -...

org.jboss.narayana.rts:lra-test-arquillian-extension (>=7.0.0.final, <=7.0.2.final), org.wildfly:wildfly-feature-pack-galleon-shared (>=30.0.0.beta1, <=34.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (>=7.0.0.final, <=7.0.2.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version =7.0.0.final, =7.0.0.final, =30.0.0.beta1, =30.0.0.beta1, =30.0.0.beta1, =30.0.0.beta1, =34.0.1.final Source cves: CVE-2024-8447 Source advisory: GHSA-QQ9F-Q439-2574...

org.jboss.hal:hal-standalone (>=3.5.0.final, <=3.7.6.final), org.wildfly:wildfly-ee-feature-pack-common (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by unknown CVE via org.jboss.hal:hal-console (>=3.5.0.final, <=3.7.6.final)

org.jboss.hal:hal-console MAVEN version =3.5.0.final, =3.5.0.final, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =35.0.0.beta1 Source cves: unknown CVE Source advisory: OSV:GHSA-64GP-R758-8PFM...

org.jboss.hal:hal-standalone (>=3.5.0.final, <=3.7.6.final), org.wildfly:wildfly-ee-feature-pack-common (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by unknown CVE via org.jboss.hal:hal-console (>=3.5.0.final, <=3.7.6.final)

org.jboss.hal:hal-console MAVEN version =3.5.0.final, =3.5.0.final, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =35.0.0.beta1 Source cves: unknown CVE Source advisory: GHSA-64GP-R758-8PFM...

WordPress Element Pack Elementor Addons plugin <= 5.10.12 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by WordFence in WordPress Plugin Element Pack Elementor Addons versions = 5.10.12...

Heels on fire. Hacking smart ski socks

TL;DR A silly-season BLE connectivity story Overheat people’s smart ski socks …but only when in Bluetooth range AND when the owner's phone is out of range of their feet! Having experienced painfully cold feet several times over the years while skiing, including once at minus 42°C in the Canadian...

CVE-2024-11852

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

CVE-2024-11852

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

CVE-2024-11852 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

CVE-2024-11852 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

CVE-2024-11852

CVE-2024-11852 affects the Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress. The root cause is a missing capability check in the get_layouts() function, present in all versions up to and including 5.10.12. This allows a...