CVE-2025-46835 – Git GUI Directory Traversal Write Permission Vulnerability

July 10, 2025

CVE ID : CVE-2025-46835

Published : July 10, 2025, 3:15 p.m. | 2 hours, 29 minutes ago

Description : Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-7370 – Libsoup Cookie Parsing NULL Pointer Dereference Vulnerability

Next Article CVE-2025-46334 – Git GUI Path Injection Vulnerability

Highlights

CVE-2025-6656 – PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure

June 25, 2025

CVE ID : CVE-2025-6656

Published : June 25, 2025, 10:15 p.m. | 4 hours, 6 minutes ago

Description : PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PRC files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-26731.

Severity: 3.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Vibe Loop: AI-native reliability engineering for the real world

Docker Compose gets new features for building and running agents

Why Enterprises Are Choosing AI-Driven React.js Development Companies in 2025

Unmasking The Magic: The Wizard Of Oz Method For UX Research

The Beats Studio Buds Plus are nearly 50% off during Prime Day – hurry while the deal lasts

Perplexity’s Comet AI browser is hurtling toward Chrome – how to try it

My favorite headphones for watching movies are at their lowest price for Prime Day

Musk claims new Grok 4 beats o3 and Gemini 2.5 Pro – how to try it

Oracle Cloud EPM: Transitioning to Forms 2.0, Dashboards 2.0 by October 2025

Oracle Cloud EPM: Transitioning to Forms 2.0, Dashboards 2.0 by October 2025

This Week in Laravel: React.js, Filament vs Laravel, and Junior Test

NativePHP for Mobile v1.1: Smaller, Smarter, and Ready to Scale

Linux’s Ascendancy: Charting the Open-Source Surge in the Desktop OS Arena

Linux’s Ascendancy: Charting the Open-Source Surge in the Desktop OS Arena

Asteroid Shooter – time-bound survival asteroid shooter

Mozilla VPN Linux App is Now Available on Flathub

CVE-2025-46835 – Git GUI Directory Traversal Write Permission Vulnerability

CVE-2025-27614 – Gitk Command Injection Vulnerability

CVE-2025-46334 – Git GUI Path Injection Vulnerability

Next.js Cache Poisoning Vulnerability Let Attackers Trigger DoS Condition

5 ways to avoid spyware disguised as legit apps – before it’s too late

CVE-2025-32440 – NetAlertX Authentication Bypass Vulnerability

Raspberry Pi 5 Desktop Mini PC

CVE-2025-6656 – PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure

Firefox 138 Released With Fix for Multiple High-Severity Vulnerabilities

Beyond Aha Moments: Structuring Reasoning in Large Language Models

Kritieke beveiligingslekken in forumsoftware vBulletin actief misbruikt

CVE-2025-46835 – Git GUI Directory Traversal Write Permission Vulnerability

Related Posts