Messages 授权问题漏洞

Messages is an open-source email inbox software developed by La Suite numérique. Version 0.2.0 of Messages contains a vulnerability related to authorization issues. This vulnerability stems from operations on the ThreadAccessSerializer function in the file serializers.py, which may lead to improp...

Information Disclosure

label Studio is vulnerable to Information Disclosure. This vulnerability exists due to improper sensitive fields restrictions in the the object-relational mapper in serializers.py, allowing an attacker to access and sensitive filters...

Remote Code Execution (RCE)

rpc.py is vulnerable to remote code execution. The vulnerability exists because the PickleSerialize in the decode function of serializers.py is not enabled by default, allowing an attacker to cause the data to be processed with unpickle by providing a malicious HTTP header...