Path Traversal via Symbolic Links in `ObsidianReader`

Description The ObsidianReader class, designed to parse Obsidian vaults, contains a critical security flaw that allows arbitrary file read through symbolic links symlinks. When processing a vault, the reader does not resolve or validate the absolute paths of files, enabling an attacker to place a...

Omnissa Horizon 安全漏洞

Omnissa Horizon is an application from Omnissa, Inc. which provides centralized desktops and applications. A security vulnerability exists in Omnissa Horizon that stems from a code logic flaw. An attacker can escalate privileges by exploiting the vulnerability...