Lucene search
+L

21 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•30 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

ImpactWhen downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References6Affected Software1
osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•39 views

PYSEC-2026-1316 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References6
Veracode
Veracode
•added 2025/12/13 7:10 a.m.•30 views

Directory Traversal

Dosage is vulnerable to Directory Traversal. The vulnerability is due to improper handling of file extensions derived from the HTTP Content-Type header, which allows an attacker to write arbitrary files outside the intended directory...

8.8CVSS6.2AI score0.00486EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/11/10 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-64184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/08 7:41 a.m.•12 views

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/07 4:15 a.m.•32 views

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS0.00486EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/11/07 4:15 a.m.•34 views

UBUNTU-CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/07 3:02 a.m.•57 views

CVE-2025-64184

CVE-2025-64184 affects Dosage up to version 3.1. The vulnerability arises because, while the basename is sanitized, the HTTP Content-Type header is used to derive the file extension when constructing target file names during image downloads, enabling a remote attacker (or MitM over HTTP) to cause...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/07 3:02 a.m.•37 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS0.00486EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/07 3:02 a.m.•6 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/07 3:02 a.m.•24 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.9AI score
SaveExploits0References4
Mend
Mend
•added 2025/11/07 3:02 a.m.•9 views

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•5 views

CVE-2025-64184: Improper Limitation of a Pathname to a Restricted Directory

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•24 views

Dosage path traversal vulnerability

Dosage is a serial comic download tool from the Dosage open source. A path traversal vulnerability exists in Dosage version 3.1 and earlier versions, which stems from improper handling of the HTTP Content-Type header, and could lead to arbitrary file writes...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/11/04 3:31 p.m.•32 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2025/11/04 3:31 p.m.•10 views

Directory Traversal

Overview dosage is an a comic strip downloader and archiver Affected versions of this package are vulnerable to Directory Traversal via the process of constructing target file names from remote comic sources, where the file extension is derived from the HTTP Content-Type header. An attacker can...

8.8CVSS6AI score0.00486EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/11/04 3:31 p.m.•37 views

GHSA-4VCX-3PJ3-44M7 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•8 views

PT-2025-45672

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•30 views

PT-2025-45115

Name of the Vulnerable Software and Affected Versions Dosage versions 3.1 and below Description Dosage is a comic strip downloader and archiver. When downloading comic images, the software constructs target file names from various sources, including the page URL, image URL, and page content. The...

8.8CVSS6.1AI score0.00486EPSS
SaveExploits0References21
The Hacker News
The Hacker News
•added 2021/08/25 10:28 a.m.•67 views

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered...

10CVSS0.4AI score0.0558EPSS
SaveExploits4
Rows per page
Query Builder