BLSOPS, LLC vulnerabilities
Published CVEs affecting BLSOPS, LLC products: 4 record(s), with severity, exploitation and fixes.
CVE-2025-10284
Critical · 9.6
CWE-22 Oct 9, 2025
Improper Archive Extraction in unarchive Enables RCE
BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.
CVE-2025-10283
Critical · 9.6
CWE-22 Oct 9, 2025
Improper .git Sanitization in gitdumper Enables RCE
BBOT's gitdumper module could be abused to execute commands through a malicious git repository.
CVE-2025-10282
Medium · 4.7
CWE-200 Oct 9, 2025
GitLab Domain Confusion in gitlab Leaks API Key
BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.
CVE-2025-10281
Medium · 4.7
CWE-200 Oct 9, 2025
Insecure URL Handling in git_clone Leading to Leaked API Key
BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL.