PT-2026-99114

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Subpath symlinking on Windows nodes allows for NTLM coercion. NTLM coercion is a technique used to force a remote system to authenticate against a malicious...

Security update for python3

This update for python3 fixes the following issues: Security fixes: CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter="data" bsc1244032 CVE-2025-4330: Fixed extraction filter bypass for linking outside extraction directory bsc1244060...

EUVD-2022-3633

Malicious code in bioql PyPI...

Kernel update: New kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0. The new kernel introduces stability fixes. Vulnerability id: PSBM-89993 Running Ubuntu containers with systemd 229-4ubuntu21.8 could result in application failures due to...

Debian DLA-1445-3 : busybox regression update

It was found that the security update of busybox announced as DLA-1445-1 to prevent the exploitation of CVE-2011-5325, a symlinking attack, was too strict in case of cpio archives. This update restores the old behavior. For Debian 8 'Jessie', this problem has been fixed in version...

CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...

CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...

GLSA-200511-16 : GNUMP3d: Directory traversal and insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200511-16 GNUMP3d: Directory traversal and insecure temporary file creation Ludwig Nussel from SUSE Linux has identified two vulnerabilities in GNUMP3d. GNUMP3d fails to properly check for the existence of /tmp/index.lok before...

fkey 0.0.2 - Local File Accessibility

fkey 0.0.2 - Local File Accessibility / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-li...