CVE-2026-73291: Improper Limitation of a Pathname to a Restricted Directory

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET...

Cisco ThousandEyes Enterprise Agent BrowserBot component has a command injection vulnerability

Cisco ThousandEyes Enterprise Agent is an enterprise network monitoring tool, primarily used for monitoring network performance and application experiences. The Cisco ThousandEyes Enterprise Agent has a command injection vulnerability. This vulnerability stems from insufficient validation of...

EUVD-2022-3734

Malicious code in bioql PyPI...

CVE-2022-47526

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...