People
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
PeopleCVE-2024-46986 – Arbitrary File Write in Camaleon CMS Leading to RCEoffsec.com
PeopleCVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluenceoffsec.com
PeopleCVE-2025-30208 – Vite Arbitrary File Read via @fs Path Traversal Bypassoffsec.com
PeopleCVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Executionoffsec.com
PeopleCVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filtersoffsec.com
PeopleCVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usageoffsec.com
Products & ServicesAI document translation: instant, accurate, secure | DeepLdeepl.com
ResourcesLance Extensionduckdb.org
ResourcesLance Extensionduckdb.org
ResourcesVortex Extensionduckdb.org
ResourcesCSV Importduckdb.org
ResourcesJSON Overviewduckdb.org
ResourcesLibreDB Studio SQL Editorduckdb.org
ResourcesCommunity Extensionsduckdb.org
ResourcesCommunity Extensionsduckdb.org
ResourcesCommunity Extensionsduckdb.org
ResourcesCommunity Extensionsduckdb.org
ResourcesCommand Lineduckdb.org
ResourcesCombining Schemasduckdb.org
ResourcesCommand Lineduckdb.org