Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: BLSOPS, LLC Clear all filters
TI-2025-09439 CVE-2025-10284 · GHSA-fhw8-8v9p-7jp7

Improper Archive Extraction in unarchive Enables RCE

Priority MEDIUM 44

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00712 Published 2025-10-09 Fixed in 2.7.0 CWE-22
TI-2025-09438 CVE-2025-10283 · GHSA-h6m2-r6h9-4c44

Improper .git Sanitization in gitdumper Enables RCE

Priority MEDIUM 43

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00483 Published 2025-10-09 Fixed in 2.7.0 CWE-22
TI-2025-09437 CVE-2025-10282 · GHSA-p3v4-c93g-cmhw

GitLab Domain Confusion in gitlab Leaks API Key

Priority LOW 21

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0023 Published 2025-10-09 Fixed in 2.7.2 CWE-200
TI-2025-09436 CVE-2025-10281 · GHSA-63wh-p5fx-h4vc

Insecure URL Handling in git_clone Leading to Leaked API Key

Priority LOW 21

BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0023 Published 2025-10-09 Fixed in 2.7.0 CWE-200