CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2025-52741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through = 1.0.11...

EUVD-2025-35490

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through = 1.0.11...

CVE-2025-52741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through = 1.0.11...

CVE-2025-52741: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through = 1.0.11...

PT-2025-43232

Name of the Vulnerable Software and Affected Versions Barry Kooij Post Connector versions through 1.0.11 Description The software contains a flaw due to improper input neutralization during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to...

EUVD-2006-5399

Malware in sbrugna...

EUVD-2025-30756

Malicious code in bioql PyPI...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

PT-2025-38989

Name of the Vulnerable Software and Affected Versions Barry Event Rocket versions through 3.3 Description An authorization issue exists in Barry Event Rocket, allowing exploitation due to incorrectly configured access control security levels. Recommendations At the moment, there is no information...

CVE-2025-53452: Missing Authorization

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

barry-callebaut.com Cross Site Scripting vulnerability OBB-3197128

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

related-posts-for-wp 跨站脚本漏洞

related-posts-for-wp is a library by Barry Kooij, a personal developer. It is used to interlink WordPress related posts with a single click. A cross-site scripting vulnerability exists in related-posts-for-wp versions prior to 2.1.3. An attacker can exploit this vulnerability to conduct cross-sit...

Barry-Voice-Assistant path traversal vulnerability

Barry-Voice-Assistant is a voice assistant from the Bulgarian personal developer Lyuboslav Karev. Barry-Voice-Assistant 2021-01-18 and earlier versions have a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resource or...

CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31541

The CVE-2022-31541 entry concerns the Barry-Voice-Assistant project (GitHub) where absolute path traversal is possible due to unsafe use of Flask’s send_file. The Red Hat, CNVD, CNVD-like entries align with this description, identifying the issue as a path traversal vulnerability in Barry-Voice-A...

CVE-2022-31541: Improper Limitation of a Pathname to a Restricted Directory

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20813

Name of the Vulnerable Software and Affected Versions lyubolp/Barry-Voice-Assistant repository through 2021-01-18 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-01-18, consider restricting...