OnyxForum 路径遍历漏洞

OnyxForum is an open source forum repository for Space Station 13: Chaotic Onyx. A path traversal vulnerability exists in versions of OnyxForum prior to 2022-05-04, which stems from insecure use of the Flask sendfile function...

CarceresBE 路径遍历漏洞

CarceresBE is an SKS parking management system backend open sourced by Delor4. CarceresBE 1.0 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited by...

Mosiac 路径遍历漏洞

Mosiac is a web application for pixelated images. A security vulnerability exists in Mosiac version 1.0.0 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

pyathenastack 路径遍历漏洞

pyathenastack is a Web API project by olmax99 individual developers. Features a distributed backend staff for reading larger datasets and storing them to AWS S3. A path traversal vulnerability exists in pyathenastack version 2019-11-08 and earlier, which stems from an incorrect call to Flask's...

umbral 路径遍历漏洞

umbral is a NuCypher API open-sourced by decentraminds.ai for applying proxy re-encryption on decentralized marketplaces. A security vulnerability exists in umbral version 2020-01-15 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

rex-web 路径遍历漏洞

rex-web is a Rexians community website open-sourced by Rexians. A security vulnerability exists in rex-web, which stems from an insecure use of the Flask sendfile function...

DSAB 路径遍历漏洞

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

photo_tag 路径遍历漏洞

phototag is a photo tagging tool by the individual developer of Boring YiBa. A security vulnerability exists in phototag version 2020-08-31 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

mp-m08-interface 路径遍历漏洞

mp-m08-interface is a repository by the individual developer João Pedro in Brazil. A security vulnerability exists in mp-m08-interface version 2020-12-10 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

hin-eng-preprocessing 路径遍历漏洞

hin-eng-preprocessing is an English parallel corpus of NMT by individual developers in KD, Belarus. It is used to enhance IITB Hindi. A security vulnerability exists in hin-eng-preprocessing version 2019-07-16 and earlier, which stems from an incorrect call to Flask's sendfile function resulting ...

sleep-learner 路径遍历漏洞

sleep-learner is a Canadian Yutong personal developer used to try to play recordings while a person sleeps in order to convey a message. A security vulnerability exists in sleep-learner version 2021-02-21 and earlier versions, which stems from an incorrect call to Flask's sendfile function that...

sphere 路径遍历漏洞

sphere is a Python library that implements the Brain Command Interface System by the individual developer Noam Ezekiel. A security vulnerability exists in sphere version 2020-05-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

swagger 路径遍历漏洞

swagger is a tool that provides Pure FlashArray and FlashBlade API documentation into the popular interactive Swagger UI. A security vulnerability exists in swagger version 1.1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Solar-system-simulator 路径遍历漏洞

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

internshipsystem 路径遍历漏洞

internshipsystem is a student internship system for schools by wlwl individual developers. A security vulnerability exists in internshipsystem version 2018-05-22 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

Anakin 路径遍历漏洞

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...

homepage 路径遍历漏洞

homepage is a web application for personal websites by Neil Lakin, an individual developer in the United States. A security vulnerability exists in homepage version 2017-03-06 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path travers...

s3label 路径遍历漏洞

S3Label is an open source browser-based tool for quickly labeling images from Stone Three. A path traversal vulnerability exists in s3label on 2019-08-14 and prior versions, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

MSM 路径遍历漏洞

MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...

mdweb 路径遍历漏洞

mdweb is a Mandoku web server from mandoku open source. A security vulnerability exists in mdweb version 2015-05-07 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...