EUVD-2025-26210

Malicious code in bioql PyPI...

CVE-2025-9650

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

CVE-2025-9650

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

CVE-2025-9650

CVE-2025-9650 affects yeqifu carRental; the path traversal flaw is in AppFileUtils.removeFileByPath (taking carimg) and is remotely exploitable with a disclosed exploit. Connected sources corroborate the vulnerability in versions up to 3fabb7eae93d209426638863980301d6f99866b3. Practical impact in...

carRental 路径遍历漏洞

carRental is a car rental software from carRental, Inc. A path traversal vulnerability exists in carRental, which originates from a path traversal caused by a misbehavior of the function removeFileByPath in the parameter carimg in the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java...