231 matches found
CVE-2026-109118
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence %2e%2e in the request path, because the...
EUVD-2026-102835
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence %2e%2e in the request path, because the...
CVE-2026-109118
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence %2e%2e in the request path, because the...
CVE-2026-109118 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence %2e%2e in the request path, because the...
PT-2026-115577
Name of the Vulnerable Software and Affected Versions rdiffweb version 7.1.1 Description An improper path containment check allows an authenticated user to perform browse, restore, history, and delete operations on paths outside the intended repository. This occurs because the system uses a strin...
CVE-2026-109118: Improper Limitation of a Pathname to a Restricted Directory
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence %2e%2e in the request path, because the...
PYSEC-2026-1863 RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0...
WS-2022-0404
A 2FA bypass vulnerability was discovered in in ikus060/rdiffweb prior to 2.5.0. Due to lack of code and email integration , old confirmation codes still remain valid on email change...
WS-2022-0346
An Open Redirect vulnerability was found in ikus060/rdiffweb due to improper data filtering process. Attackers can redirect users to any website and perform phishing attacks...
WS-2022-0340
Bypass IP detection to brute-force password in ikus060/rdiffweb prior to 2.4.4. In login API, by default, the IP address will be blocked when the user tries to login incorrectly more than 5 times but the mechanism can be bypassed by abuse X-Forwarded-For header to bypass IP dectection and perform...
EUVD-2022-42656
Malicious code in bioql PyPI...
EUVD-2022-0264
Malicious code in bioql PyPI...
Rdiffweb Allocation of Resources Without Limits or Throttling vulnerability
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4...
CVE-2023-5289
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4...
PYSEC-2023-186
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4...
CVE-2023-5289 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4...
CVE-2023-5289 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4...
CVE-2023-5289
CVE-2023-5289 affects the rdiffweb project from ikus060, specifically versions prior to 2.8.4. The root issue is Allocation of Resources Without Limits or Throttling, leading to potential resource exhaustion. The known remediation is to upgrade to version 2.8.4 or later. Exploitation details are ...
