Lucene search
+L

13346 matches found

Github Security Blog
Github Security Blog
added 2026/07/07 11:42 p.m.20 views

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Click here to jump to the Simplified Chinese version 点击跳转到简体中文版本 Goploy System Arbitrary File Read Vulnerability Basic Information - Vulnerability Name: Goploy Endpoints Arbitrary File Read via Path Traversal - Vulnerability Type: Path Traversal CWE-22 / Arbitrary File Read - Affected Product:...

6.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/07 4:52 p.m.11 views

GO-2026-5762 Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish

Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish...

9.6CVSS6AI score0.00393EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/07 4:41 p.m.16 views

GO-2026-5923 Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder...

5.9AI score
SaveExploits0References2
CVE
CVE
added 2026/07/07 4:37 p.m.63 views

CVE-2026-14904

The CVE concerns AWS RES: an improper link resolution before file access (CWE-59) in Auth.GetUserPrivateKey could allow an authenticated remote user to substitute their SSH private key (~/.ssh/id_rsa) with a symlink and read arbitrary host files on the cluster-manager EC2 instance. Since the clus...

7.1CVSS6.2AI score0.0057EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 4:37 p.m.14 views

CVE-2026-14904 RES Auth.GetUserPrivateKey Arbitrary File Read

AWS Research and Engineering Studio RES is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue CWE-59 in the Auth.GetUserPrivateKey API. An authenticated remot...

7.1CVSS6.2AI score
SaveExploits0References4
OSV
OSV
added 2026/07/07 4:03 p.m.17 views

PYSEC-2026-1787 picklescan has Arbitrary file read using `io.FileIO`

Summary Unsafe pickle deserialization allows unauthenticated attackers to read arbitrary server files and perform SSRF. By chaining io.FileIO and urllib.request.urlopen, an attacker can bypass RCE-focused blocklists to exfiltrate sensitive data example: /etc/passwd to an external server. Details...

8.7CVSS6AI score0.00509EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/07 4:03 p.m.15 views

PYSEC-2026-2040 Weblate has an arbitrary file read via symbolic links

Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Resources Thanks to Jason Marcello for responsible disclosure...

7.7CVSS6AI score0.00399EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/07 4:03 p.m.15 views

PYSEC-2026-1700 NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

Summary A directory traversal vulnerability in NiceGUI's App.addmediafiles allows a remote attacker to read arbitrary files on the server filesystem. Details Hello, I am Seungbin Yang, a university student studying cybersecurity. While reviewing the source code of the repository, I discovered a...

7.5CVSS6.2AI score0.01095EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/07 4:03 p.m.12 views

PYSEC-2026-1197 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

7.1CVSS6.1AI score0.00315EPSS
SaveExploits1References5
OSV
OSV
added 2026/07/07 4:03 p.m.16 views

PYSEC-2026-1603 Mammoth is vulnerable to Directory Traversal

Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of...

9.3CVSS6.1AI score0.00942EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/07 4:03 p.m.18 views

PYSEC-2026-2057 xml2rfc is vulnerable to arbitrary file reads through prepped files

Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML. Workarounds Test untrusted input with link elements with rel="attachment" before processing. References This is related ...

8.7CVSS6AI score0.00278EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 4:03 p.m.14 views

PYSEC-2026-2058 xml2rfc has an arbitrary file read vulnerability

Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML. Workarounds Test untrusted input with link elements with rel="attachment" before processing. Credits This vulnerability was reporte...

8.7CVSS6AI score0.00265EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 4:02 p.m.16 views

PYSEC-2026-1568 LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llamaindex repository versions 0.12.23 to 0.12.28 allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths...

7.5CVSS7.1AI score0.00555EPSS
SaveExploits1References8
OSV
OSV
added 2026/07/07 4:02 p.m.10 views

PYSEC-2026-1896 Salt's worker process vulnerable to denial of service through file read operation

Worker process denial of service through file read operation. .A vulnerability exists in the Master's “pubret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by...

5.6CVSS6AI score0.00121EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 2:34 p.m.11 views

PYSEC-2026-1267 composio Server-Side Request Forgery (SSRF) vulnerability

A Server-Side Request Forgery SSRF vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOLSCRAPEWEBSITECONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and interact with local services on the system...

6.8CVSS6AI score0.00701EPSS
SaveExploits1References5
OSV
OSV
added 2026/07/07 2:34 p.m.16 views

PYSEC-2026-1638 MLflow has a Local File Read/Path Traversal in dbfs

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while...

7.5CVSS7.1AI score0.02669EPSS
SaveExploits1References6
PyPA
PyPA
added 2026/07/07 2:34 p.m.17 views

Aim vulnerable to Cross-Site Request Forgery

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...

9.6CVSS6.3AI score0.00509EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/07/07 2:34 p.m.8 views

PYSEC-2026-1242 changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

Summary Improper input validation in the application can allow attackers to perform local file read LFR or path traversal attacks. These vulnerabilities occur when user input is used to construct file paths without adequate sanitization or validation. For example, using file:../../../etc/passwd o...

8.6CVSS5.9AI score0.00705EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 2:34 p.m.11 views

PYSEC-2026-1118 Anki Latex Incomplete Blocklist Vulnerability

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

6CVSS6AI score0.11826EPSS
SaveExploits1References9
OSV
OSV
added 2026/07/07 2:34 p.m.12 views

PYSEC-2026-1183 Apache Superset server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...

6.8CVSS6.1AI score0.01571EPSS
SaveExploits1References6
Rows per page
Query Builder