PT-2026-139815

Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static url and get version that allows attackers to hash files outside static path using ../ sequences. Attackers controlling input passed to static url can obtain SHA-512 hashes of readable files to confirm their...

EUVD-2021-14564

Malware in sbrugna...

CVE-2021-27825

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...

Directory traversal

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...

CVE-2021-27825

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...

CVE-2021-27825

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...

CVE-2021-27825: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...

CVE-2021-27825

CVE-2021-27825 applies to Mercury MAC1200R devices, describing a directory traversal vulnerability that allows attackers to read arbitrary files via the web-static/ URL. Multiple connected sources (PacketStorm exploit info and Exploit-DB entry) corroborate a path traversal flaw affecting Mercury ...

Fedora 11 : python-paste-1.7.4-1.fc11 (2010-10400)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...