3822 matches found
syrabond 路径遍历漏洞
syrabond is an MQTT-based smart home system. A security vulnerability exists in syrabond version 2020-05-25 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
PT-2022-20829
Name of the Vulnerable Software and Affected Versions seveas/golem repository through 2016-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-05-17, consider restricting access to the send fil...
PT-2022-20831
Name of the Vulnerable Software and Affected Versions tsileo/flask-yeoman versions through 2013-09-13 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2013-09-13, consider restricting access to the sen...
PT-2022-20819
Name of the Vulnerable Software and Affected Versions noamezekiel/sphere repository through 2020-05-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-31, consider restricting access to the se...
PT-2022-20824
Name of the Vulnerable Software and Affected Versions project-anuvaad/anuvaad-corpus versions prior to 2020-11-23 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-11-23, update to a version that...
PT-2022-20838
Name of the Vulnerable Software and Affected Versions yogson/syrabond versions prior to 2020-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-25, update to a version that safely uses the...
PT-2022-20802
Name of the Vulnerable Software and Affected Versions dainst/cilantro versions 0.0.0 through 0.0.4 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.0.0 through 0.0.4, consider updating to a version where the...
PT-2022-20812
Name of the Vulnerable Software and Affected Versions kumardeepak/hin-eng-preprocessing repository through 2019-07-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-07-16, consider restricting...
PT-2022-20843
Name of the Vulnerable Software and Affected Versions adriankoczuruek/ceneo-web-scrapper versions prior to 2021-03-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-03-16, update the repository...
Python-Recipe-Database 路径遍历漏洞
Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
BaiduWenkuSpider_flaskWeb 路径遍历漏洞
BaiduWenkuSpiderflaskWeb is a python web project based on the FlaskFrame framework for crawling Baidu's library by ChangeWeDer personal developer. path traversal vulnerability exists in versions of BaiduWenkuSpiderflaskWeb prior to 2021-11-29, which The vulnerability stems from a failure of the...
PT-2022-20290 · Unknown · Semwifiapclient
Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...
PT-2022-20852
Name of the Vulnerable Software and Affected Versions ralphjzhang/iasset repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2022-05-04, consider restricting access to the se...
vprj 路径遍历漏洞
vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
PT-2022-20776
Name of the Vulnerable Software and Affected Versions ganga-devs/ganga versions prior to 8.5.10 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 8.5.10, update to version 8.5.10 or later to resolv...
equanimity 路径遍历漏洞
equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...
cockybook 路径遍历漏洞
cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...
Fan_Platform 路径遍历漏洞
FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...
PT-2022-11285
Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions prior to 07-07-2021 Description The issue allows for Remote Code Execution on the mail options configuration page. Specifically, in the location of the sendmail application in the cacti configuration page, it is possible...
PT-2022-31883
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a resource leak in the lpfc sli4 send seq to ulp function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...