filebrowser

3 results · Clear filters · Feed

• Medium 5.3
  CVE-2025-11579 Public exploit

  DoS via Out Of Memory Crash

  github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.

  nwaples rardecode kubescape kots Debian Ubuntu Wolfi Go
  Oct 10, 2025
• Medium 4.4
  CVE-2025-22870 Public exploit

  HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be prox…

  Go standard library golang.org/x/net net/http golang.org/x/net/proxy Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 12, 2025
• Medium 6.1
  CVE-2024-0406 Public exploit

  Mholt/archiver: path traversal vulnerability

  A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with…

  Red Hat Red Hat OpenShift Container Platform 4.18 Red Hat Advanced Cluster Security 4 Red Hat Advanced Cluster Security 3 Wolfi Go
  Apr 6, 2024