Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 10:25:38 +0000 cnvd-2018-11236 https://cve.radiocsirt.org/vuln/cnvd-2018-11236 cnvd-2018-11236 https://cve.radiocsirt.org/vuln/cnvd-2018-11236 EUVD-2026-180057 https://cve.radiocsirt.org/vuln/euvd-2026-180057 EUVD-2026-180057 https://cve.radiocsirt.org/vuln/euvd-2026-180057 fkie_cve-2016-10528 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10528 <p>restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.</p> <p>restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10528 GHSA-xg5r-8j97-2wrj — Directory Traversal in restafary https://cve.radiocsirt.org/vuln/ghsa-xg5r-8j97-2wrj <p><strong>Affected:</strong> npm: restafary</p> <p>Affected versions of `restafary` are susceptible to a directory traversal vulnerability when a root path is specified in the configuration.</p> <p>Proof of Concept</p> <p>``` curl -i -s -k -X &#39;GET&#39; -H &#39;Authorization: Basic YWRtaW46cGFzc3dvcmQ=&#39; &#39;http://localhost:8000/api/v1/fs/..%2f..%2fetc/passwd&#39; ```</p> <p>## Recommendation</p> <p>Update to version 1.6.1 or later.</p> <p><strong>Affected:</strong> npm: restafary</p> <p>Affected versions of `restafary` are susceptible to a directory traversal vulnerability when a root path is specified in the configuration.</p> <p>Proof of Concept</p> <p>``` curl -i -s -k -X &#39;GET&#39; -H &#39;Authorization: Basic YWRtaW46cGFzc3dvcmQ=&#39; &#39;http://localhost:8000/api/v1/fs/..%2f..%2fetc/passwd&#39; ```</p> <p>## Recommendation</p> <p>Update to version 1.6.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-xg5r-8j97-2wrj gsd-2016-10528 https://cve.radiocsirt.org/vuln/gsd-2016-10528 gsd-2016-10528 https://cve.radiocsirt.org/vuln/gsd-2016-10528