mdweb 路径遍历漏洞

mdweb is a Mandoku web server from mandoku open source. A security vulnerability exists in mdweb version 2015-05-07 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

shackerpanel 路径遍历漏洞

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

flask-mongo-skel 路径遍历漏洞

flask-mongo-skel is a Flask MongoDB framework from Shamail Tayyab's personal developer. flask-mongo-skel 2012-11-01 and earlier versions contain a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter resource or file paths for The vulnerability is...

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

ThunderDocs 路径遍历漏洞

ThunderDocs is an open source tool from the ThundeRatz Robotics Team. Google Docs permissions can be accessed on the desktop to easily view, create, upload and download documents. ThunderDocs version 2020-05-01 and earlier versions have a security vulnerability that stems from an incorrect call t...

sphere 路径遍历漏洞

sphere is a Python library that implements the Brain Command Interface System by the individual developer Noam Ezekiel. A security vulnerability exists in sphere version 2020-05-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

movie-review-sentiment-analysis 路径遍历漏洞

movie-review-sentiment-analysis is used by Rohit Nayak, an individual developer, to perform sentiment analysis on IMDB movie reviews in order to categorize them as positive or negative reviews. A security vulnerability exists in movie-review-sentiment-analysis version 2017-05-07 and earlier, whic...

AutomatedQuizEval 路径遍历漏洞

AutomatedQuizEval, an automated quiz evaluation system from the personal developer Sravani Boinepelli, suffers from a path traversal vulnerability that stems from the failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be exploited by...

livro_python 路径遍历漏洞

livropython is a repository for the individual developer Eduardo dos Santos Pereira in Brazil. A security vulnerability exists in livropython, which stems from insecure use of the Flask sendfile function...

Home__internet 路径遍历漏洞

Homeinternet is a type of web server by the individual developer Umesh Patil. It is used to make specified folders on a computer accessible on a network for quick file uploads and downloads. Homeinternet A security vulnerability exists in versions 2020-08-28 and earlier, which stems from an unsaf...

travel_blahg 路径遍历漏洞

travelblahg is a Python framework by Daniel Kolbman, a personal developer in the United States. It is used for tracking travel. A security vulnerability exists in travelblahg version 2016-01-16 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute...

MSM 路径遍历漏洞

MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...

logstash-management-api 路径遍历漏洞

logstash-management-api is a management system interface repository by Lukas Chripko, an individual developer in Sweden. A security vulnerability exists in logstash-management-api version 2020-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in...

cilantro 路径遍历漏洞

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

VideoServer 路径遍历漏洞

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

ModelConverter 路径遍历漏洞

ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...