11 matches found
EUVD-2024-35185
Malicious code in bioql PyPI...
CVE-2024-35081
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method...
CVE-2024-35081
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method...
CVE-2024-35081
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method...
CVE-2024-35081
The open-source testing platform LuckyFrameWeb v3.5.2 is vulnerable to arbitrary file deletion . This flaw originates from an improper limitation of a pathname (Path Traversal) via the fileName parameter within the fileDownload method. An attacker could potentially delete arbitrary files on the s...
CVE-2024-35081
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method...
LuckyFrameWeb 安全漏洞
LuckyFrameWeb is an open source testing platform open source by LuckyFrameWeb. A security vulnerability exists in LuckyFrameWeb version v3.5.2, which originates from an arbitrary file deletion via the fileName parameter in the fileDownload method...
CVE-2024-35081: Improper Limitation of a Pathname to a Restricted Directory
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method...
CVE-2024-33118
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...
CVE-2024-33118
LuckyFrameWeb version v3.5.2 contains an arbitrary read vulnerability located in the fileDownload method within the com.luckyframe.project.common.CommonController class. This flaw allows for unauthorized reading of data. As a temporary workaround, it is recommended to disable the fileDownload met...
PT-2024-25120 · Unknown · Luckyframeweb
Name of the Vulnerable Software and Affected Versions: LuckyFrameWeb version 3.5.2 Description: The issue is related to an arbitrary read vulnerability. It affects the fileDownload method in the class com.luckyframe.project.common.CommonController. Recommendations: For LuckyFrameWeb version 3.5.2...