772 matches found
CVE-2023-53857
CVE-2023-53857: Linux kernel BPF local storage fix. The issue arises when a bpf local storage update path acquires a local_lock while a raw_spin_lock is held, potentially enabling an unsafe memory allocation context in tracing. The patch ensures kzalloc occurs before acquiring the lock (pre-raw_s...
CVE-2025-51661
A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.savefile method in core/storage.py uses filenames from user input without validation to construct savepath and save...
PT-2025-47521
Name of the Vulnerable Software and Affected Versions FileCodeBox versions prior to 2.3 Description A path traversal issue exists in FileCodeBox that allows for arbitrary file writes. This occurs when the application is configured to use local filesystem storage. The SystemFileStorage.save file...
CVE-2025-51661
A path traversal vulnerability exists in FileCodeBox versions v2.2 and earlier when configured to use local filesystem storage. The SystemFileStorage.save_file method in core/storage.py fails to validate user-supplied filenames when constructing the save_path. This allows remote attackers to perf...
CVE-2025-51661
A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.savefile method in core/storage.py uses filenames from user input without validation to construct savepath and save...
CVE-2025-56527
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...
Cinnamon kotaemon 安全漏洞
Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which originates from storing plaintext passwords in client-side localStorage...
CVE-2025-56527
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...
PT-2025-47336
Name of the Vulnerable Software and Affected Versions Kotaemon version 0.11.0 Description The software stores passwords in plaintext within the client's localStorage. This poses a significant risk as anyone with access to the client's storage can easily retrieve user credentials. Recommendations...
CVE-2025-56527
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...
EUVD-2025-198038
Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...
CVE-2025-56527
Kotaemon version 0.11.0 (including commit 37cdc28 ) is vulnerable to CVE-2025-56527 , where the application stores raw username and password credentials in the client's localStorage . This flaw is located in libs/ktem/ktem/pages/login.py and libs/ktem/ktem/assets/js/main.js. Because these credent...
kernel: bpf: Fix deadlock when freeing cgroup storage
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a "bpf: Prevent deadlock from recursive bpftaskstorageget|delete" first introduced deadlock prevention for fentry/fexit programs attaching on...
kernel: bpf: Fix deadlock when freeing cgroup storage
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a "bpf: Prevent deadlock from recursive bpftaskstorageget|delete" first introduced deadlock prevention for fentry/fexit programs attaching on...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with a...
Arbitrary File Write
github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...
EUVD-2017-14082
Malware in sbrugna...
EUVD-2020-12589
Malware in sbrugna...