CVE-2021-41714

In Tipask 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing infomation leakage...

EUVD-2021-28726

Malicious code in bioql PyPI...

Tipask 2.0 front arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

Brief description: tipask you can adjust the picture save and delete the original avatar Delete the original avatar used when a post submission parameters Result in arbitrary file deletion vulnerability Detailed description: function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 =...