melange has Path Traversal via .PKGINFO in --persist-lint-results

melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and pkgname values read from the .PKGINFO control file of the APK being linted. In affected versions these values were not validate...

WordPress Templately plugin <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write vulnerability

Unauthenticated Limited Arbitrary JSON File Write vulnerability discovered by type5afe in WordPress Plugin Templately versions = 3.4.8...

PT-2023-35856 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash has been reported, involving functions such as json write TF, dwg json LTYPE, and json objects write. Recommendations: ...