>> ARCHIVE: 2016-10

The GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line. Versions 1.14 through 1.29…

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities…

BigTree CMS version 4.2.13 suffers from a cross site request forgery vulnerability.

SmallFTPd version 1.0.3 suffers from a mkd command denial of service vulnerability.

Komfy Switch with Camera DKZ-201S/W suffers from a wifi password disclosure vulnerability.

task_t should be considered harmful and can lead to many XNU elevations of privilege.

Boonex Dolphin versions 7.3 and below suffer from an authentication bypass vulnerability.

Hewlett Packard TouchSmart Calendar Service version 4.1.4245 suffers from a privilege escalation vulnerability.