CVE-2026-23632

CVE-2026-23632 (Gogs) : A bug in Gogs prior to 0.13.4 allows a token with read permission to modify repository contents via the PUT /repos/:owner/:repo/contents/* endpoint. After repoAssignment() passes, PutContents() calls UpdateRepoFile(), leading to commit creation and git push, enabling unaut...

KB5014353 - Description of the security update for SQL Server 2019 CU16: June 14, 2022

KB5014353 - Description of the security update for SQL Server 2019 CU16: June 14, 2022 Summary How to obtain and install the update How to obtain or download the latest cumulative update package for Linux More information File information Information about protection and security Summary An...

Command Injection

Overview libvcs is a vcs abstraction layer. Affected versions of this package are vulnerable to Command Injection via argument injection. When calling the updaterepo function when using hg, the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get...

Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the Open Source libuser Vunlerabilities (CVE-2015-3245 and CVE-2015-3246)

Summary IBM Software Delivery and Lifecycle Patterns requires client action for the Open Source libuser Vunlerabilities. The libuser library implements a standardized interface for manipulating and administering user and group accounts, and is installed by default on Linux distributions derived...

Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2014-5119)

Summary IBM Software Delivery and Lifecycle Patterns requires client action for the glibc vulnerabilities. The GNU C Library glibc is vulnerable to a heap-based buffer overflow, a local attacker could exploit this vulnerability to overflow a buffer and execute arbitrary code on the system with ro...

PYSEC-2015-33

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the 1 updaterepo, 2 getlocks, or 3 getusergroups API method...