EUVD-2020-1215

Malware in sbrugna...

EUVD-2020-1048

Malware in sbrugna...

EUVD-2020-1155

Malware in sbrugna...

EUVD-2020-1157

Malware in sbrugna...

EUVD-2013-6156

Malware in sbrugna...

EUVD-2007-5448

Malware in sbrugna...

EUVD-2020-1254

Malware in sbrugna...

EUVD-2018-0240

Malware in sbrugna...

EUVD-2025-7800

Malicious code in bioql PyPI...

EUVD-2024-1511

Malicious code in bioql PyPI...

EUVD-2022-39762

Malicious code in bioql PyPI...

EUVD-2023-0727

Malicious code in bioql PyPI...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

CVE-2025-59049

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal...

CVE-2025-59049 Mockoon has a Path Traversal and LFI in the static file serving endpoint

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal...

CVE-2025-59049

Mockoon before 9.2.0 is affected by a Path Traversal and Local File Inclusion (LFI) in the static file serving endpoint. The issue stems from unsafe templating of the server filename using user input, enabling an attacker to read arbitrary files from the mock server filesystem. A fix is available...

CVE-2025-59049 Mockoon has a Path Traversal and LFI in the static file serving endpoint

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal...

CVE-2025-59049 Mockoon has a Path Traversal and LFI in the static file serving endpoint

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal...

Mockoon security vulnerabilities

Mockoon is an interface software of mockoon open source. A security vulnerability exists in Mockoon versions prior to 9.2.0 that stems from a path traversal and local file inclusion vulnerability in the static file service configuration...

CVE-2025-59049: External Control of File Name or Path

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal...