QNAP Systems Qfiling 路径遍历漏洞

QNAP Systems Qfiling is an automated archiving and file organizing tool from QNAP Systems Taiwan, China. A path traversal vulnerability exists in QNAP Systems Qfiling versions prior to 3.13.1, which stems from a path traversal that could result in reading unexpected file or system data...

CVE-2023-53907 Bludit 3.13.1 Authenticated Arbitrary File Download via Backup Plugin

Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through...

PT-2023-20328 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 3.13.1 Description: Gradio is an open-source Python library to build machine learning and data science demos and web applications. When using Gradio's share links by setting share=True, a private SSH key is sent to an...