CVE-2025-36857: Incorrect Default Permissions

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to other users or projects. Affected versions allow standard users to add custom...

PT-2021-15141 · Google · Slo Generator

Name of the Vulnerable Software and Affected Versions: SLO Generator versions prior to the version including https://github.com/google/slo-generator/pull/173 Description: The SLO generator has an issue where it allows for the loading of YAML files. If these files are crafted in a specific format,...