PT-2022-20820

Name of the Vulnerable Software and Affected Versions nrlakin/homepage repository through 2017-03-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

syrabond 路径遍历漏洞

syrabond is an MQTT-based smart home system. A security vulnerability exists in syrabond version 2020-05-25 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20831

Name of the Vulnerable Software and Affected Versions tsileo/flask-yeoman versions through 2013-09-13 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2013-09-13, consider restricting access to the sen...

PT-2022-20819

Name of the Vulnerable Software and Affected Versions noamezekiel/sphere repository through 2020-05-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-31, consider restricting access to the se...

PT-2022-20824

Name of the Vulnerable Software and Affected Versions project-anuvaad/anuvaad-corpus versions prior to 2020-11-23 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-11-23, update to a version that...

PT-2022-20838

Name of the Vulnerable Software and Affected Versions yogson/syrabond versions prior to 2020-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-25, update to a version that safely uses the...

PT-2022-20802

Name of the Vulnerable Software and Affected Versions dainst/cilantro versions 0.0.0 through 0.0.4 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.0.0 through 0.0.4, consider updating to a version where the...

PT-2022-20812

Name of the Vulnerable Software and Affected Versions kumardeepak/hin-eng-preprocessing repository through 2019-07-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-07-16, consider restricting...

PT-2022-20843

Name of the Vulnerable Software and Affected Versions adriankoczuruek/ceneo-web-scrapper versions prior to 2021-03-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-03-16, update the repository...

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

BaiduWenkuSpider_flaskWeb 路径遍历漏洞

BaiduWenkuSpiderflaskWeb is a python web project based on the FlaskFrame framework for crawling Baidu's library by ChangeWeDer personal developer. path traversal vulnerability exists in versions of BaiduWenkuSpiderflaskWeb prior to 2021-11-29, which The vulnerability stems from a failure of the...

PT-2022-20290 · Unknown · Semwifiapclient

Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...

PT-2022-20852

Name of the Vulnerable Software and Affected Versions ralphjzhang/iasset repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2022-05-04, consider restricting access to the se...

vprj 路径遍历漏洞

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

PT-2022-20829

Name of the Vulnerable Software and Affected Versions seveas/golem repository through 2016-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-05-17, consider restricting access to the send fil...

PT-2022-20835

Name of the Vulnerable Software and Affected Versions waveyan/internshipsystem versions through 2018-05-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-11285

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions prior to 07-07-2021 Description The issue allows for Remote Code Execution on the mail options configuration page. Specifically, in the location of the sendmail application in the cacti configuration page, it is possible...

PT-2022-31883

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a resource leak in the lpfc sli4 send seq to ulp function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...