ThunderDocs 路径遍历漏洞

ThunderDocs is an open source tool from the ThundeRatz Robotics Team. Google Docs permissions can be accessed on the desktop to easily view, create, upload and download documents. ThunderDocs version 2020-05-01 and earlier versions have a security vulnerability that stems from an incorrect call t...

kotekan 路径遍历漏洞

kotekan is a high performance radio data processing pipeline from kotekan open source. A security vulnerability exists in kotekan version 2021.11 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

mp-m08-interface 路径遍历漏洞

mp-m08-interface is a repository by the individual developer João Pedro in Brazil. A security vulnerability exists in mp-m08-interface version 2020-12-10 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

rbtm 路径遍历漏洞

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

golem 路径遍历漏洞

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

flask-mvc 路径遍历漏洞

flask-mvc is a repository by the individual developer Candra Nur Ihsan. A security vulnerability exists in flask-mvc version 2020-09-14 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20772 · Orchest · Orchest

Name of the Vulnerable Software and Affected Versions: orchest/orchest versions prior to 2022.05.0 Description: The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations: For versions prior to 2022.05.0, update to version 2022.05.0 or later to...

cilantro 路径遍历漏洞

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

KG-fashion-chatbot 路径遍历漏洞

KG-fashion-chatbot is a multi-modal chatbot for online shopping assistant by youzhou individual developer. KG-fashion-chatbot has a security vulnerability in versions 2018-05-22 and earlier, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

photo_tag 路径遍历漏洞

phototag is a photo tagging tool by the individual developer of Boring YiBa. A security vulnerability exists in phototag version 2020-08-31 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Krypton 路径遍历漏洞

Krypton is a KryptoCurrency data relay service by Bolun Han Personal Developer. A security vulnerability exists in Krypton version 2021-06-03 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

sleep-learner 路径遍历漏洞

sleep-learner is a Canadian Yutong personal developer used to try to play recordings while a person sleeps in order to convey a message. A security vulnerability exists in sleep-learner version 2021-02-21 and earlier versions, which stems from an incorrect call to Flask's sendfile function that...

VideoServer 路径遍历漏洞

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

OpenMF 路径遍历漏洞

OpenMF is an open source mobile forensic investigation tool for the Android platform open sourced by SCoRe Lab. OpenMF has a security vulnerability in version 2022-05-03 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

Mosiac 路径遍历漏洞

Mosiac is a web application for pixelated images. A security vulnerability exists in Mosiac version 1.0.0 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

umbral 路径遍历漏洞

umbral is a NuCypher API open-sourced by decentraminds.ai for applying proxy re-encryption on decentralized marketplaces. A security vulnerability exists in umbral version 2020-01-15 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

swagger 路径遍历漏洞

swagger is a tool that provides Pure FlashArray and FlashBlade API documentation into the popular interactive Swagger UI. A security vulnerability exists in swagger version 1.1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

vprj 路径遍历漏洞

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter...