CVE-2023-31874

Yank Note YN 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire'childprocess'...

Exploit for External Control of File Name or Path in Elastic Kibana

CVE-2018-17246 - Kibana LFI There is no input validation so w...