CVE-2025-7039

A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to...

Linux Distros Unpatched Vulnerability : CVE-2019-12779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without...

Malicious code in ctf-q21-empire-tmp-test125 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41656 Malicious code in ctf-q21-empire-tmp-test125 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41654 Malicious code in ctf-q21-empire-tmp-test123 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41655 Malicious code in ctf-q21-empire-tmp-test124 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41651 Malicious code in ctf-q21-empire-tmp-bw31337 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41652 Malicious code in ctf-q21-empire-tmp-t0pw1ng (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41648 Malicious code in ctf-q21-empire-tmp-bw134347 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41647 Malicious code in ctf-q21-empire-tmp-bw134345 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ctf-q21-empire-tmp-bw121116 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ctf-q21-empire-tmp-bw126616 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-9409

A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUpload of the file modules/system/controller/CommonController.go. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack...

Linux Distros Unpatched Vulnerability : CVE-2018-7441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating...

CVE-2025-9381: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpasupplicant.conf. Performing manipulation results in information disclosure. The attack may be carried out on the physical device. The attack's complexity is rated as...

Linux Distros Unpatched Vulnerability : CVE-2013-4419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of...

Malicious code in tmp-tmp3 (npm)

The package tmp-tmp3 was found to contain malicious code...

MAL-2025-36995 Malicious code in tmp-tmp3 (npm)

The package tmp-tmp3 was found to contain malicious code...

Fedora 42 : glib2 (2025-16acfe9927)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16acfe9927 advisory. Resolve CVE-2025-7039 Buffer Under-read on GLib through glib/gfileutils.c via gettmpfile with several other bug fixes. Tenable has extracted the preceding...

CVE-2025-8904: Storing Passwords in a Recoverable Format

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...