Serdar Çatal

Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.

A Time-of-check time-of-use (TOCTOU) race condition exists in Pardus MyComputer. A TOCTOU race condition is a software bug where a program checks the state of a resource (such as a file) and then performs an action based on that check, but the state of the resource changes between the check and the use.

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal. This issue affects pardus-boot-repair: from 1.0.8 before 1.1.0.

Hayat Mobile contains a flaw where the use of client-side authentication allows for an authentication bypass. Client-side authentication refers to a security mechanism where the verification of a user's identity is performed on the user's device rather than on a secure server, which can be manipulated by an attacker.

An authorization bypass exists due to a user-controlled key issue, which allows the exploitation of trusted identifiers.