628 matches found
CVE-2009-1330
CVE-2009-1330 Easy RM to MP3 Converter 2.7.3.700의 버퍼 오버플로우 익스플로잇 CVE-2009-1330 기반: pwntools msfvenom / reversetcp 페이로드 ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 취약한 앱은 https://www.exploit-db.com/exploits/10374 에서 확인할 수 있습니다...
mini-shai-hulud-detector
미니 샤이훌루드 탐지기 Mini Shai-Hulud npm 공급망 공격CVE-2026-45321, CVSS 9.6을 위한 원커맨드 스캐너입니다. 중요: 토큰을 교체하기 전에 먼저 탐지하세요 이 웜은 자격 증명이 철회되는 것을 감지하면 rm -rf 를 실행하는 지속성 데몬gh-token-monitor을 설치합니다. 데몬이 제거되었는지 확인하기 전에는 GitHub PAT나 npm 토큰을 교체하지 마세요. 탐지 → 데몬 제거 → 그다음에 교체하세요. 사용법 curl -fsSL...
EUVD-2026-83800
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2026-94093
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2026-94093 DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2026-94093
DLR-RM stable-baselines3 up to 2.9.0 is affected by unsafe pickle deserialization in the PPO.load, load_replay_buffer, and VecNormalize.load functions of save_util.py, enabling remote attacks with no privileges required (user interaction required). In v2.9.0 the PyTorch tensor load path was harde...
CVE-2026-94093: Deserialization of Untrusted Data
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...
OESA-2026-3524 python-GitPython security update
GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...
OESA-2026-3523 python-GitPython security update
GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...
CVE-2026-76217
A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for...
SUSE CVE-2026-76217
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-49255
In electerm versions prior to 3.11.11, the rmrf(), mv(), and cp() functions in src/app/lib/fs.js interpolate untrusted file paths into shell command strings without escaping metacharacters. A malicious SSH/SFTP server can supply filenames like file"$(touch /tmp/pwned)" to break out of quotes and ...
CVE-2026-76217
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-76217 GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
EUVD-2026-62458
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-76217 GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-76217: External Control of File Name or Path
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-76217: External Control of File Name or Path
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...
CVE-2026-8170: Improper Link Resolution Before File Access
The mv, cp, and rm file utilities exposed within the ExtremeXOS EXOS shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic link that references a privileged filesyst...