Injection and Smuggling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can…CVE-2022-1271Gnu · CVSS 8.8 · 5.5% likely

   CWE-179

2. CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subc…CVE-2017-6508Gnu · 2.9% likely

   CWE-93

3. /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Gnu · 2.7% likely

   CWE-74

4. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.CVE-2020-15011Gnu · 1.9% likely

   CWE-74

5. gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct a…CVE-2017-17531Gnu · 1.2% likely

   CWE-74

6. Improper Output Encoding in GNU cpioCVE-2026-66486GNU · CVSS 4.6 · 0.2% likely

   CWE-116

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.