PT-2025-49320

Name of the Vulnerable Software and Affected Versions xerrors Yuxi-Know versions up to 0.4.0 Description A server-side request forgery condition exists in the OtherEmbedding.aencode function within the /src/models/embed.py file. Manipulation of the health url argument can trigger this issue,...

Design/Logic Flaw

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...