PT-2026-24699

Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export file route. The application accepts a JSON payload containing a filename and content. While the developer intended for a native UI...

MAL-2025-20064 Malicious code in export-route-kernel-wind-big (npm)

The package export-route-kernel-wind-big was found to contain malicious code...

Malicious code in export-route-kernel-wind-big (npm)

The package export-route-kernel-wind-big was found to contain malicious code...

PT-2024-29982 · Unknown · Filament Excel

Name of the Vulnerable Software and Affected Versions: Filament Excel versions prior to v2.3.3 Description: The export download route "/filament-excel/path" allowed downloading any file without login when the webserver allows ../ in the URL. This issue was reported by Kevin Pohl. Recommendations:...