9 matches found
diario-commandline-tools
diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...
CVE-2026-111618
CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...
EUVD-2026-103040
CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...
CVE-2026-111618: Improper Limitation of a Pathname to a Restricted Directory
CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...
PT-2026-116017
CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...
MAL-2025-22252 Malicious code in hash-query-string-assert-catch (npm)
The package hash-query-string-assert-catch was found to contain malicious code...
Malicious code in hash-query-string-assert-catch (npm)
The package hash-query-string-assert-catch was found to contain malicious code...
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
An authenticated Admin user could craft HTTP requests to filter users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The response would not include the hashed passwords, but an attacker could infer partial password hashes and...
Hashboy-Tool - A Hash Query Tool
Hashboy was redeveloped onhash-buster Author:Leiothrix How to install $git clone https://github.com/sf197/hashboy-tool $cd hashboy-tool $python3 hashboy.py How to use $ python3 hashboy.py / / / / / / / / / / / / / / / / / / / / // / / / // / // / // / // //,/// //.//, / // Author:Leiothrix...