CVE-2025-8454: Improper Verification of Cryptographic Signature

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

SUSE CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball...

SUSE CVE-2013-7050

The getmainsourcedir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCANEXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name...

SUSE CVE-2013-7085

Uscan in devscripts 2.13.5, when USCANEXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename...

CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

DEBIAN-CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

Code injection

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

CVE-2013-7325

CVE-2013-7325 : The issue affects the uscan utility in the devscripts package prior to 2.13.19. A crafted tarball could be exploited to execute arbitrary code on the remote system running uscan, with the attacker gaining the privileges of that user. The available connected documents consistently ...

CVE-2013-7325

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

CVE-2013-7325: Undefined Security Weakness

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball...

PT-2019-7011

Name of the Vulnerable Software and Affected Versions devscripts versions prior to 2.13.19 Description An issue exists in uscan in devscripts, which could let a remote malicious user execute arbitrary code via a crafted tarball. Recommendations For versions prior to 2.13.19, update to version...

Ubuntu Update for devscripts USN-2084-1

Check for the Version of devscripts OpenVAS Vulnerability Test $Id: gbubuntuUSN20841.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for devscripts USN-2084-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

USN-2084-1: devscripts vulnerability

It was discovered that the uscan tool incorrectly repacked archive files. If a user or automated system were tricked into processing specially crafted files, a remote attacker could possibly execute arbitrary code...

devscripts uscan code execition

Code execution on server reply parsing...

DEBIAN-CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball...

CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball...

CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball...