5033 matches found
aiohttp is vulnerable to directory traversal
Summary Improperly configuring static resource resolution in aiohttp when used as a web server can result in the unauthorized reading of arbitrary files on the system. Details When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static...
CVE-2024-23822 Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)
Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as...
CVE-2024-0989 Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
GHSA-G5M6-HXPP-FC49
creationtimestamp| type| source ---|---|--- 2024-01-26 22:14:38+00:00| seen| https://t.me/arpsyndicate/3093...
CVE-2024-0804
creationtimestamp| type| source ---|---|--- 2024-01-24 01:26:53+00:00| seen| https://t.me/ctinow/172452 2024-01-26 01:42:15+00:00| seen| https://t.me/ctinow/173941 2024-02-17 15:11:43+00:00| seen| https://t.me/ctinow/186949 2025-05-22 17:43:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17...
CVE-2023-47193
creationtimestamp| type| source ---|---|--- 2024-01-23 22:27:03+00:00| seen| https://t.me/ctinow/172352...
CVE-2023-38626
creationtimestamp| type| source ---|---|--- 2024-01-23 22:26:56+00:00| seen| https://t.me/ctinow/172345...
CVE-2024-0754
creationtimestamp| type| source ---|---|--- 2024-01-23 15:27:08+00:00| seen| https://t.me/ctinow/172043 2024-01-25 19:31:44+00:00| seen| https://t.me/ctinow/173722 2024-02-17 10:11:33+00:00| seen| https://t.me/ctinow/186851 2025-05-22 17:43:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17...
CVE-2024-0749
creationtimestamp| type| source ---|---|--- 2024-01-23 15:26:59+00:00| seen| https://t.me/ctinow/172038 2024-01-25 18:46:37+00:00| seen| https://t.me/ctinow/173677 2024-02-17 09:11:09+00:00| seen| https://t.me/ctinow/186821 2024-02-17 09:11:10+00:00| seen| https://t.me/ctinow/186822 2025-05-22...
lagiuggiola.it Improper Access Control vulnerability OBB-3840995
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-WJ6H-64FC-37MP
creationtimestamp| type| source ---|---|--- 2024-01-22 22:46:38+00:00| seen| https://t.me/ctinow/171495...
GHSA-M4M5-J36M-8X72
creationtimestamp| type| source ---|---|--- 2024-01-22 22:46:37+00:00| seen| https://t.me/ctinow/171494...
GHSA-HJ55-9JMV-9JRJ
creationtimestamp| type| source ---|---|--- 2024-01-22 22:46:34+00:00| seen| https://t.me/ctinow/171492...
GHSA-9RHQ-86FM-QXQC
creationtimestamp| type| source ---|---|--- 2024-01-22 22:36:57+00:00| seen| https://t.me/ctinow/171487...
GHSA-C4PG-5GGH-VCPP
creationtimestamp| type| source ---|---|--- 2024-01-22 22:36:56+00:00| seen| https://t.me/ctinow/171486...
GHSA-3F63-HFP8-52JQ
creationtimestamp| type| source ---|---|--- 2024-01-22 22:36:54+00:00| seen| https://t.me/ctinow/171485...
GHSA-G7PH-8423-PF4J
creationtimestamp| type| source ---|---|--- 2024-01-22 22:31:58+00:00| seen| https://t.me/ctinow/171484...
GHSA-R67W-F99W-MGXJ
creationtimestamp| type| source ---|---|--- 2024-01-22 22:31:57+00:00| seen| https://t.me/ctinow/171483...
integra-online.it Improper Access Control vulnerability OBB-3840884
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...