PT-2025-40338

Name of the Vulnerable Software and Affected Versions Ekushey CRM version 5.0 Description A stored cross site scripting issue exists in Ekushey CRM version 5.0 due to insufficient validation of user-supplied data. The issue is located in the project file upload functionality via the...

Directory Traversal

io.fabric8, kubernetes-client-project is vulnerable to Directory Traversal. Lack of validation in the copyDir function allows for arbitrary writes to outside of the current directory through a malicious archive...