EUVD-2023-56358

Malicious code in bioql PyPI...

CVE-2023-51646

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can...

CVE-2023-51646

CVE-2023-51646 affects Allegra. The vulnerability resides in the uploadSimpleFile method and stems from improper validation of a user-supplied path used in file operations, enabling a directory-traversal attack that can lead to remote code execution. Attack context: the code would run with LOCAL ...

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra that stems from the uploadSimpleFile feature containing a directory traversal remote code execution vulnerability...