CVE-2023-52288

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/.txt URI from views.py, allows attackers to read arbitrary files...

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software, which arises due to insufficient verification of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted package...

Design/Logic Flaw

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

phpGroupWare 0.9.13 - Debian Package Configuration

phpGroupWare 0.9.13 - Debian Package Configuration source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecu...