CVE-2025-46394

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...

PT-2025-17652

Name of the Vulnerable Software and Affected Versions BusyBox versions through 1.37.0 Description The issue allows local users to launch a network application with an argv0 containing an ANSI terminal escape sequence. This can lead to a denial of service when netstat is used by a victim, causing...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal when routing requests to a backend using a PathPrefix, Path, or PathRegex matcher. An attacker can bypass the middleware chain to access backend services by including traversal sequences like /../ in a request. Detai...

OpCode-Based Malware Classification Using Machine Learning and Deep Learning Techniques

This technical report presents a comprehensive analysis of malware classification using OpCode sequences. Two distinct approaches are evaluated: traditional machine learning using n-gram analysis with Support Vector Machine SVM, K-Nearest Neighbors KNN, and Decision Tree classifiers; and a deep...

BIT-GIT-2024-52005 The sideband payload is passed unfiltered to the terminal in git

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1332)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1296)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

GHSA-89XP-C3MQ-QJ84 gurk (aka gurk-rs) mishandles ANSI escape sequences

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

gurk (aka gurk-rs) mishandles ANSI escape sequences

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

gurk 安全漏洞

gurk is a terminal signaling messenger client for boxdot individual developers. A security vulnerability exists in gurk 0.6.3 and earlier versions that stems from improper handling of ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

The CVE-2025-30089 entry applies to gurk (aka gurk-rs) up to version 0.6.3, which is reported to mishandle ANSI escape sequences. The vulnerability is described with a base CVSS v3.1 score of 5.4 (Network attack vector, high attack complexity, no privileges, no user interaction, scope Changed, Co...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

CVE-2025-30089

gurk aka gurk-rs through 0.6.3 mishandles ANSI escape sequences...

USN-7350-1 unrar-nonfree vulnerabilities

It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write arbitrary files outside of the targeted directory. CVE-2022-30333, CVE-2022-48579 It...

CVE-2025-27111

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

CVE-2025-0823

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2024-54169

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...