16 matches found
EUVD-2017-1646
Malware in sbrugna...
EUVD-2016-1016
Malware in sbrugna...
EUVD-2019-3227
Malware in sbrugna...
EUVD-2024-42713
Malicious code in bioql PyPI...
EUVD-2024-54309
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-4981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show...
Pagure 安全漏洞
Pagure is a Pagure open source Git repository written in Python that provides web services. A security vulnerability exists in the Pagure server that originates from a malicious user committing a specially crafted git repository, which could lead to the disclosure of sensitive information on the...
DEBIAN-CVE-2024-47516
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...
CVE-2024-47516
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...
UBUNTU-CVE-2024-47516
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...
CVE-2024-47516 Pagure: argument injection in pagurerepo.log()
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...
CVE-2024-47515
Pagure CVE-2024-47515 involves generate_archive() following symbolic links in temporary clones, enabling disclosure of local files outside repository boundaries. Ubuntu (USN-7984-1) and Debian (DLA-4390-1) advisories reference Pagure fixes; Debian notes version 5.11.3+dfsg-1+deb11u1, Ubuntu patch...
CVE-2024-47515 Pagure: generate_archive() follows symbolic links in temporary clones
A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance...
CVE-2024-47515 Pagure: generate_archive() follows symbolic links in temporary clones
A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance...
SUSE CVE-2024-47516
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...
Pagure Authorization Vulnerability
Pagure is a Git repository using Python to provide Web services . Security exists in Pagure 3.3.0 and earlier versions, and the vulnerability stems from a failure to properly authorize. An attacker can exploit the vulnerability to browse a private repository...