CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJSは、ExpressレンダリングAPIを通じて、純粋なテンプレートデータとエンジン設定オプションを混在させます。内部設定オプションを上書きすることで、ダウンストリームアプリケーションでリモートコード実行が引き起こされる可能性があります。 ソース https://securitylab.github.com/advisories/GHSL-2021-023-squirrelly/ 分析 https://blog.diefunction.io/vulnerabilities/ghsl-2021-023...

CVE-2024-2624 Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically within the @router.get"/switchpersonalpath" endpoint in ./lollms-webui/lollmscore/lollms/server/endpoints/lollmsuser.py. The vulnerability arises due to insufficient sanitization...

Design/Logic Flaw

Aquarius CMS through 4.3.5 writes POST and GET parameters including passwords to a log file due to an overwriting of configuration parameters under certain circumstances...

openSUSE Security Update : docker-distribution (openSUSE-2018-336)

This update for docker-distribution fixes the following issues : Security issues fixed : - CVE-2017-11468: Fixed a denial of service memory consumption via the manifest endpoint bsc1049850. Bug fixes : - bsc1083474: docker-distirbution-registry overwrites configuration file with update. -...