GHSA-3446-6MGW-F79P Grav is Vulnerable to XXE via SVG Upload

Dear Grav Security Team, A security vulnerability was discovered in Grav CMS that allows authenticated attackers to read arbitrary files from the server through XML External Entity XXE injection. Vulnerability Summary | Field | Details | |-------|---------| | Vulnerability Type | XML External...

CVE-2024-2361

CVE-2024-2361 affects parisneo/lollms-webui. The vulnerability resides in the install_model() function of lollms_core/lollms/binding.py, where improper sanitization of the file:// protocol and other inputs enables path traversal. Attackers can manipulate the path and variant_name parameters to re...

Digital Guardian Management Console 7.1.2.0015 Arbitrary File Read

Title: Digital Guardian Managment Console - Arbitrary File Read Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10176 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description : ============= Digital Guardian is an American data...