GHSA-X2MW-7J39-93XQ n8n has Arbitrary Command Execution via File Write and Git Operations

Impact An authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code execution. By writing to specific configuration files and then triggering a git operation, the attacker could execute arbitrary she...

GHSA-M273-6V24-X4M4 Picklescan vulnerable to Arbitrary File Writing

Summary Picklescan has got open and shutil in its default dangerous blocklist to prevent arbitrary file overwrites. However the module distutils isnt blocked and can be used for the same purpose ie to write arbitrary files. Details This is another vulnerability which impacts the downstream user. ...

Arbitrary File Upload

net.mingsoft, ms-mcms is vulnerable to Arbitrary File Upload. The vulnerability is due to improper validation of uploaded files in the /ms/template/writeFileContent.do component, which allows an attacker to upload arbitrary files and potentially execute malicious code on the server...

MySQL Write File

Write files to filesystem using MySQL INTO OUTFILE - requires FILE privilege from kittysploit import from lib.protocols.mysql.mysqlclient import MySQLClient class ModulePost, MySQLClient: info = "name": "MySQL Write File", "description": "Write files to filesystem using MySQL INTO OUTFILE -...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

EulerOS 2.0 SP13 : nasm (EulerOS-SA-2025-2271)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash.CVE-2023-38665 Tenable has extracted t...

EulerOS 2.0 SP13 : nasm (EulerOS-SA-2025-2303)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash.CVE-2023-38665 Tenable has extracted t...

EulerOS 2.0 SP11 : nasm (EulerOS-SA-2025-2205)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash.CVE-2023-38665 Tenable has extracted t...

GHSA-JV9M-VF54-CHJJ Flowise is vulnerable to arbitrary file write through its WriteFileTool

Summary The WriteFileTool in Flowise does not restrict the file path for reading, allowing authenticated attackers to exploit this vulnerability to write arbitrary files to any path in the file system, potentially leading to remote command execution. Details Flowise supports providing WriteFileTo...

Directory Traversal

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Directory Traversal via the WriteFile and ReadFile tools. An attacker can gain full control over the server, including executing arbitrary commands, by supplying crafted file paths that allow writing files ...

CVE-2025-61913 Flowise is vulnerable to arbitrary file read, arbitrary file write

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any...

CVE-2025-61913 Flowise is vulnerable to arbitrary file read, arbitrary file write

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any...

Flowise path traversal vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. A path traversal vulnerability exists in versions prior to Flowise 3.0.8, which stems from unrestricted file path access in WriteFileTool and ReadFileTool, and could lead to arbitrary file reads and writes and remote...

EUVD-2016-8379

Malware in sbrugna...

Unity Linux 20.1070e Security Update: nasm (UTSA-2025-984703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984703 advisory. Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash. Tenable has extracted the preceding description block...

EUVD-2025-25404

Malicious code in bioql PyPI...

Symlink Traversal

n8n is vulnerable to symlink traversal. The vulnerability is due to improper handling of symbolic links in the Read/Write File node, which allows an attacker to bypass directory restrictions and read or write to otherwise inaccessible paths...

CVE-2025-57749

n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links symlinks. An attacker with the...

Symlink Attack

Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Symlink Attack via the Read/Write File node. An attacker can access restricted files by creating symbolic links that bypass directory restrictions. Remediation Upgrade n8n-core to version 1.106.0 ...

CVE-2025-57749

n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links symlinks. An attacker with the...