EUVD-2025-11533

Malicious code in bioql PyPI...

EUVD-2021-29010

Malicious code in bioql PyPI...

EUVD-2022-43596

Malicious code in bioql PyPI...

EUVD-2024-0274

Malicious code in bioql PyPI...

EUVD-2023-43998

Malicious code in bioql PyPI...

EUVD-2024-31585

Malicious code in bioql PyPI...

EUVD-2024-39140

Malicious code in bioql PyPI...

EUVD-2022-1822

Malicious code in bioql PyPI...

EUVD-2025-1873

Malicious code in bioql PyPI...

EUVD-2024-48615

Malicious code in bioql PyPI...

EUVD-2022-42283

Malicious code in bioql PyPI...

CVE-2025-58769: Improper Limitation of a Pathname to a Restricted Directory

auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import endpoint in applications built with the SDK does not validate the file-path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths o...

Beyaz Computer CityPlus 路径遍历漏洞

Beyaz Computer CityPlus is an electronic document management platform from Beyaz Computer in Turkey. A path traversal vulnerability exists in Beyaz Computer CityPlus versions prior to 24.29375, which stems from an improperly restricted pathname and could lead to a path traversal attack...

CVE-2025-35430: Improper Limitation of a Pathname to a Restricted Directory

CISA Thorium does not adequately validate the paths of downloaded files via 'downloadephemeral' and 'downloadchildren'. A remote, authenticated attacker could access arbitrary files subject to file system permissions. Fixed in 1.1.2...

Delta Electronics DIALink

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for...

DEBIAN-CVE-2023-53165

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical...

libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

...

Gitblit 安全漏洞

Gitblit is an open source, pure Java Git solution from Gitblit for managing, viewing, and provisioning Git repositories. A security vulnerability exists in Gitblit v1.7.1, which stems from improper repository pathname handling and could lead to a reflective cross-site scripting attack...

CVE-2025-47650

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Infility Infility Global infility-global allows Path Traversal.This issue affects Infility Global: from n/a through = 2.15.11...

CVE-2025-54021

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through = 6.1.14...