6539 matches found
Path traversal
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
iasset 路径遍历漏洞
iasset is a repository by Ralph Zhang, a personal developer. iasset has a security vulnerability in version 2022-05-04 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...
logstash-management-api 路径遍历漏洞
logstash-management-api is a management system interface repository by Lukas Chripko, an individual developer in Sweden. A security vulnerability exists in logstash-management-api version 2020-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in...
ModelConverter 路径遍历漏洞
ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
OnyxForum 路径遍历漏洞
OnyxForum is an open source forum repository for Space Station 13: Chaotic Onyx. A path traversal vulnerability exists in versions of OnyxForum prior to 2022-05-04, which stems from insecure use of the Flask sendfile function...
ChangePop-Back 路径遍历漏洞
ChangePop-Back is an open source unizar-30226-2019-06 library for ChangePop-Back. ChangePop-Back has a security vulnerability in 2019-06-04 and earlier versions that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...
MSM 路径遍历漏洞
MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...
MercadoEnLineaBack 路径遍历漏洞
MercadoEnLineaBack is an open source repository by cheo0. Versions of MercadoEnLineaBack prior to 2022-05-04 have a path traversal vulnerability that stems from insecure use of the Flask sendfile function...
CVE-2022-33171
creationtimestamp| type| source ---|---|--- 2022-07-04 20:12:37+00:00| seen| https://t.me/cibsecurity/45571 2025-12-08 15:00:08+00:00| published-proof-of-concept| Telegram/LcY7eBFwAwyzwe0KaufIGSBHQfjWzlBSbPNDVNgDN2U1XQ 2026-09-01 20:01:35+00:00| seen| https://t.me/hackingAttack/59736 2026-09-02...
CVE-2021-25066
creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:33+00:00| seen| https://t.me/cibsecurity/45562...
CVE-2022-1746
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:19+00:00| seen| https://t.me/cibsecurity/45099 2025-04-17 18:58:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12317...
CVE-2022-1742
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:14+00:00| seen| https://t.me/cibsecurity/45094 2025-04-17 18:58:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12323...
CVE-2022-1744
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:11+00:00| seen| https://t.me/cibsecurity/45091 2025-04-17 18:58:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12320...
CVE-2022-32209
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:06+00:00| seen| https://t.me/cibsecurity/45087 2022-12-14 20:23:23+00:00| seen| https://t.me/cibsecurity/54544 2023-01-04 23:16:25+00:00| seen| https://t.me/ctinow/84952 2026-06-14 04:23:47+00:00| seen|...
CVE-2022-1739
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:00+00:00| seen| https://t.me/cibsecurity/45084 2025-04-17 18:58:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12318...
GHSA-JHFV-8936-G652 Cross-site Scripting in Jenkins Hidden Parameter Plugin
Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...
PT-2022-3087 · Jtekt · Jtekt Toyopuc Plcs
Name of the Vulnerable Software and Affected Versions: JTEKT TOYOPUC PLCs versions prior to 2022-04-29 Description: The issue is related to insufficient data authentication in the programmable logic controllers. This allows a remote attacker to execute arbitrary code. The controllers use the...
CVE-2022-1680
creationtimestamp| type| source ---|---|--- 2022-06-04 12:03:15+00:00| seen| https://t.me/cKure/9654 2022-06-06 14:46:17+00:00| seen| https://t.me/truesecator/3029 2022-06-06 22:04:07+00:00| seen| https://t.me/xakepru/12469 2022-06-06 22:30:15+00:00| seen| https://t.me/cibsecurity/43875 2022-06-0...