CVE-2021-43798

CVE-2021-43798 - Grafana 任意文件读取 用于 CVE-2021-43798 授权测试的 Python 工具包，该漏洞为 Grafana 路径遍历漏洞，可通过插件资产路径实现未经认证的任意文件读取。 本仓库包含： grafanapoc.py：交互式任意文件读取 PoC，可将下载的文件保存到本地。 grafanapassdecryptor.py：辅助工具，用于在拥有 grafana.ini 和/或 secretkey 时解密 Grafana 加密的数据源密钥，并从 grafana.db 导出 Grafana 用户密码哈希。 警告...

EUVD-2026-33965

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may resolve to a directory rather than a file. Requests that resolve to a directory raise an unhandled RuntimeError inside...

CVE-2026-45554

NiceGUI is a Python UI framework. Before version 3.12.0, two FastAPI routes serving per-component static assets accept a sub-path that can resolve to a directory, causing an unhandled RuntimeError inside Starlette’s FileResponse. Uvicorn logs the full traceback, and since these routes require no ...