CVE-2025-59463

An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...

EUVD-2025-7028

Malicious code in bioql PyPI...

HAX 代码问题漏洞

HAX is a HAX+CMS open source microsite managed using a PHP backend by HAX The Web. A code issue vulnerability exists in HAX that stems from using a non-exhaustive blacklist to block only some file types, causing the system to fail open instead of closed...

CVE-2024-12217

CVE-2024-12217 affects the gradio-app/gradio project (commit git 67e4044). The flaw in the blocked_path implementation on Windows allows path traversal via NTFS Alternate Data Streams syntax (e.g., C:/tmp/secret.txt::$DATA), bypassing blocks that prevent access to restricted files and enabling re...

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 KB5002350 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerability, see ​​​​​​​Microsoft Common Vulnerabilities and...

Description of the security update for SharePoint Server Subscription Edition: December 13, 2022 (KB5002327)

Description of the security update for SharePoint Server Subscription Edition: December 13, 2022 KB5002327 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microso...

CVE-2019-9608

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadImage URI...

The vulnerability of the X Window System graphical server allows a perpetrator to alter file access rights or cause a service failure.

The vulnerability of the LockServer function os/utils.c in the X Window System graphical server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker acting locally to change file access rights to “444” or to cause a service failure by...