EUVD-2018-7670

Malware in sbrugna...

Malicious Package

Overview @visiology-public-utilities/language-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

CVE-2018-15810

Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters...

Directory traversal

Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters...

CVE-2018-15810

Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters...

CVE-2018-15810

CVE-2018-15810 affects Visiology Flipbox Software Suite prior to 2.7.0. The root cause is insufficient sanitization of filename parameters, enabling a directory traversal via %5c%2e%2e%2f. This can lead to disclosure of source code and sensitive information. Affected: Flipbox Software Suite (befo...

CVE-2018-15810: Improper Limitation of a Pathname to a Restricted Directory

Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters...