../ in FreshRSS. How did no one recommend that one to me yesterday? A new ../ would have been fun.
GitHub
Authenticated RCE via path traversal inside include()
### Summary Using a path traversal inside the `language` user configuration parameter, it's possible to call `install.php` and perform various a...
A couple vulns in Trail of Bits' Fickling.
GitHub
Bypass via marshal.loads() and types.FunctionType()
## Our assessment Based on the test case provided in the original report below, this bypass was caused by `marshal` and `types` missing from our...
GitHub
Bypass via pty.spawn()
## Our assessment Based on the test case provided in the original report below, this bypass was caused by `pty` missing from our block list of u...