[SECURITY] [DSA 6282-1] rsync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6282-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 20, 2026 https://www.debian.org/security/faq -...

CVE-2010-0537

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name...

USN-5921-1: rsync vulnerabilities

Koen van Hove discovered that the rsync client incorrectly validated filenames returned by servers. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could use this issue to write arbitrary files, and possibly escalate privileges...

ProFTPD mod_copy Unauthenticated Remote File Copying (CVE-2015-3306)

A remote file copying vulnerability exists in ProFTPD. The vulnerability is due to a design weakness within module modcopy. Successful exploitation would result in arbitrary code execution on target system...

Remote file inclusion

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name...

CVE-2010-0537

CVE-2010-0537 affects DesktopServices in Mac OS X 10.6 up to 10.6.2. A path-resolution flaw during an application’s save panel could allow a user‑assisted remote attacker to trigger unintended remote file copying via a crafted share name. The Red Hat advisory reiterates the same description. Appl...

CVE-2010-0537

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name...