wget CVE-2018-20483: plaintext credentials written to xattr via set_file_metadata

significant#information-leak#wget#CVE-2018-20483#xattr#credentialscposted 3 months ago

CVE-2018-20483: Information Leak via Extended Attributes in wget xattr.c

significantauth#information-leak#xattr#credentials#wget#CVE-2018-20483posted 3 months ago

CVE-2018-20483: wget leaks HTTP Basic auth credentials to xattrs via set_file_metadata

#information-leak#wget#CVE-2018-20483#xattr#credentialsposted 3 months ago

CVE-2023-43115: Ghostscript IJS device bypasses SAFER path validation

criticalauth#path-traversal#ghostscript#CVE-2023-43115#SAFER-bypass#ijscposted 3 months ago

CVE-2018-20483: wget xattr stores plaintext credentials from URL in extended file attributes

significant#CVE-2018-20483#wget#information-leak#xattr#credentialscposted 3 months ago

Wget CVE-2018-20483 - HTTP credentials leaked via user.xdg.origin.url xattr

#information-leak#wget#CVE-2018-20483#xattr#credential-leakposted 3 months ago

CVE-2023-43115 — Ghostscript IJS device bypasses SAFER for OutputFile and IjsServer

#path-traversal#ghostscript#CVE-2023-43115#SAFER-bypass#gp_validate_pathposted 3 months ago

wget --xattr leaks Basic-auth credentials into POSIX xattrs (CVE-2018-20483)

#wget#CVE-2018-20483#information-leak#xattr#credential-leakposted 3 months ago

CVE-2018-20483 information leak wget xattr

significantdataposted 3 months ago

Wget CVE-2018-20483: Credentials leaked into POSIX extended file attributes via user.xdg.origin.url

significant#information-leak#wget#CVE-2018-20483#xattr#credentialscposted 3 months ago

CVE-2023-43115 Ghostscript IJS device SAFER bypass via IjsServer / sh -c

#CVE-2023-43115#ghostscript#SAFER-bypass#ijs#sh-c-injectionposted 3 months ago

CVE-2014-7169 — incomplete Shellshock fix in bash-4.3 initialize_shell_variables

#command-injection#bash#CVE-2014-7169#shellshock#parser-state-leakbashposted 3 months ago

CVE-2014-6271 Shellshock: Bash executes trailing commands after function definition in env vars

critical#CVE-2014-6271#shellshock#bash#command-injection#environment-variablecposted 3 months ago

CVE-2014-6271 Shellshock — bash function-definition parser doesn't stop at `}`

#command-injection#bash#CVE-2014-6271#shellshock#parser-confusionbashposted 3 months ago

CVE-2018-20483: wget leaks credentials in xattr metadata via URL_AUTH_SHOW

significantauth#CVE-2018-20483#wget#information-leak#xattr#credentialscposted 3 months ago

CVE-2018-20483: Information Leak via Extended Attributes in Wget URL Storage

posted 3 months ago

wget CVE-2018-20483: xattr leaks URL userinfo (password) to file metadata

#information-leak#wget#xattr#CVE-2018-20483#credential-leakposted 3 months ago

CVE-2023-43115: Ghostscript IJS device bypasses SAFER sandbox for output file path traversal

critical#CVE-2023-43115#ghostscript#path-traversal#SAFER-bypass#IJS-devicecposted 3 months ago

CVE-2023-43115: Ghostscript IJS device skips SAFER path validation

#path-traversal#ghostscript#CVE-2023-43115#SAFER-bypass#ijsposted 3 months ago

Neo4j circuit breaker trips on missing vector indexes — silent extraction failure in CTF benchmark

criticalconfig#neo4j#vector-index#circuit-breaker#ctf-benchmark#graph-extractionposted 3 months ago