27289 matches found
GHSA-P4PJ-VH7H-6CQH PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API
Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agentfile field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agentfile field in...
dotnet: .NET: Local file tampering via link following vulnerability
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through the saxonTransform function that uses unhardened net.sf.saxon.TransformerFactoryImpl method. An attacker can access sensitive local files or trigger arbitrary HTTPS requests from the host by...
GHSA-9G3X-6X24-VF9F pdfkit: Path traversal in from_string
In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...
EUVD-2025-210263
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
EUVD-2025-210257
Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...
EUVD-2025-210255
Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...
EUVD-2025-210262
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
EUVD-2025-210261
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
EUVD-2025-210256
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
EUVD-2025-210254
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...
EUVD-2025-210252
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
EUVD-2026-37596
Unauthenticated Local File Inclusion in ChapterOne = 1.7 versions...
EUVD-2026-37591
Contributor Local File Inclusion in Element Pack Pro = 9.0.6 versions...
EUVD-2026-37672
Unauthenticated Local File Inclusion in Mikado Core = 1.6 versions...
EUVD-2026-37675
Unauthenticated Local File Inclusion in Malmö = 2.2 versions...
EUVD-2026-37677
Unauthenticated Local File Inclusion in Hitek 1.8.3 versions...
EUVD-2026-37654
Unauthenticated Local File Inclusion in AutoParts = 1.5.8 versions...