Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Python’s Tarfile path traversal bug from 2007 still present in 350k open source repos
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Python’s Tarfile path traversal bug from 2007 still present in 350k open source repos


💡 Newskategorie: Hacking
🔗 Quelle: blackhatethicalhacking.com

Reading Time: 3 minutes

The post Python’s Tarfile path traversal bug from 2007 still present in 350k open source repos first appeared on Black Hat Ethical Hacking. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Python’s Tarfile path traversal bug from 2007 still present in 350k open source repos


📈 141.28 Punkte

📌 Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)


📈 55.56 Punkte

📌 15-Year-Old Python Bug Let Hacker Execute Code in 350k Python Projects


📈 45.48 Punkte

📌 Unpatched 15-year old Python bug allows code execution in 350k projects


📈 38.97 Punkte

📌 350K Open-Source Projects At Risk of Supply Chain Vulnerability


📈 37.23 Punkte

📌 Trellix Launches Advanced Research Center, Finds Estimated 350K Open-Source Projects at Risk to Supply Chain Vulnerability


📈 37.23 Punkte

📌 Python up to 3.8.3 TAR Archive Lib/tarfile.py _proc_pax infinite loop


📈 36.38 Punkte

📌 Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects


📈 36.38 Punkte

📌 Serious Exchange Flaw Still Plagues 350K Servers


📈 34.72 Punkte

📌 Repos not present


📈 32.53 Punkte

📌 Open Source is More Secure than Closed Source because Closed Source is More Secure than Open Source


📈 31.38 Punkte

📌 In 2019, multiple open source companies changed course—is it the right move? "We have to draw a line between open source and the right to make money with open source."


📈 30.52 Punkte

📌 The EU Open Source Policy Summit 2023 starts in few minutes and is a day-long event where policy-makers and Open Source communities explore together Europe’s opportunities for leveraging Open Source. Registration is free and you can attend online.


📈 30.52 Punkte

📌 Ushering In a New Era for Open-Source Silicon Development (CEO of lowrisc , a non profit that develops open source hardware on why open source hardware failed in the past, and how lowrisc does things differently)


📈 30.52 Punkte

📌 Security: Lücke in Pythons Tarfile-Modul betrifft 350.000 Projekte


📈 29.86 Punkte

📌 Security: Lücke in Pythons Tarfile-Modul betrifft 350.000 Projekte - Golem.de


📈 29.86 Punkte

📌 Massive threat campaign strikes open-source repos, Sonatype spots new CursedGrabber malware


📈 27.79 Punkte

📌 Open Source: Gut getarnte Malware-Kampagne in Tausenden Github Repos


📈 27.79 Punkte

📌 🔥 9 Open-Source Repos That Will Make Your SaaS Gold 🤔


📈 27.79 Punkte

📌 📈 Top 7 open source repos on GitHub [October edition]🚀✨


📈 27.79 Punkte

📌 Amazon Spends $350K On Seattle Mayor's Race


📈 27.06 Punkte

📌 2 Million Emails of 350K+ Clients Possibly Exposed in Oregon DHS Data Breach


📈 27.06 Punkte

📌 350k Fresh HQ Combo Email-Pass SQL shopping


📈 27.06 Punkte

📌 350k Private Combo Email Good For (Streaming,Gaming,Shoping) |


📈 27.06 Punkte

📌 Hackers Earn $350k on Second Day at Pwn2Own Toronto 2023


📈 27.06 Punkte

📌 Mehrere Probleme in ardana-neutron, ardana-swift, cassandra, crowbar-openstack, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, ruby


📈 26.07 Punkte

📌 Turning another one of my old slam poems about chronic pain into a song, all from bed. Still using the same microphone/recorder I've had since I was 8, still rocking the free and open-source Ubuntu Studio for all my artistic needs.


📈 25.5 Punkte

📌 Internet Bug Bounty: Path traversal through path stored in Uint8Array in Node.js 20


📈 25.39 Punkte

📌 "Why don't you like Fedora?" - well here's one reason. Over-reliance on third-party repos for basic shit like Mesa VAAPI drivers, and they *still* can't package them correctly.


📈 25.28 Punkte

📌 DARPA to Present Open-Source, Secure Voting System at DEF CON 2019


📈 25.08 Punkte

📌 Open Source Vulnerabilities database: Nice idea but too many Google-shaped hoops to jump through at present


📈 25.08 Punkte

📌 Grassroots Open Science MOOC launched, with pilot Module on Open Research Software and Open Source. All free, all re-usable content. Vive la open revolution!


📈 24.14 Punkte

📌 ⚡️⚡️ 7 ML Repos used by the TOP 1% of Python developers [based on REAL data] 🐉


📈 24.14 Punkte

📌 🐍 8 backend repos used by the top 1% of python devs 🏆


📈 24.14 Punkte

📌 [webapps] Oracle GlassFish Server Open Source Edition 4.1 - Path Traversal (Metasploit)


📈 23.26 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software