EUVD-2025-4963

Malicious code in bioql PyPI...

EUVD-2024-49328

Malicious code in bioql PyPI...

EUVD-2024-49759

Malicious code in bioql PyPI...

EUVD-2022-0652

Malicious code in bioql PyPI...

EUVD-2024-1126

Malicious code in bioql PyPI...

EUVD-2024-54565

Malicious code in bioql PyPI...

EUVD-2024-41409

Malicious code in bioql PyPI...

EUVD-2023-46318

Malicious code in bioql PyPI...

CVE-2025-61734 Apache Kylin: improper restriction of file read

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

The vulnerability of the Python programming language interpreter, related to improper restriction of the path to a limited directory, allows attackers to gain access and modify any arbitrary file in the system.

The vulnerability of the Python programming language interpreter is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and modify any arbitrary file in the system...

CVE-2025-10719

Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files...

PT-2025-38523

Name of the Vulnerable Software and Affected Versions Tronclass affected versions not specified Description Tronclass Learning Management System suffers from an Insecure Direct Object Reference issue. Remote attackers with regular privileges can manipulate a parameter to gain unauthorized access ...

CVE-2022-45133

Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XML file could allow one to traverse the server to obtain access to secure files or cause code execution based on the payload...

CVE-2025-57749 n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files

n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links symlinks. An attacker with the...

USN-7678-1: Perl vulnerability

It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations...

USN-7678-1 perl vulnerability

It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations...

SUSE CVE-2025-40909

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

CVE-2023-43505

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to...

PT-2025-20919 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.9.8.3 Kirby versions prior to 3.10.1.2 Kirby versions prior to 4.7.1 Description: A vulnerability in Kirby affects sites that use the collection helper or $kirby-collection method with a dynamic collection name,...

Apple iPadOS 安全漏洞

Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. A security vulnerability exists in Apple iPadOS that originates from shortcuts that may access files that are normally inaccessible...