BytesnBites
IT Security
pgAdmin 4’s save_file endpoint suffers a symlink race that could let attackers write arbitrary files. A patch adds O_NOFOLLOW protection and tighter… pgAdmin 4’s save_file endpoint suffers a symlink race that could let attackers write arbitrary…
IT Security
Grav CMS allows a logged‑in user to upload a malicious ZIP archive that can be unpacked into the public directory, leading to… Grav CMS allows a logged‑in user to upload a malicious ZIP archive that can…
IT Security
Grav 2.0 and 2.0.0‑rc.9 allow stored CSS injection via the Markdown image resize() action, enabling UI redress for privileged sessions. Sanitize resize… Grav 2.0 and 2.0.0‑rc.9 allow stored CSS injection via the Markdown image resize() action,…