Public library
Cybersecurity articles
Automated coverage from researcher feeds — text + code extraction, no thumbnails. Sort by recent, popular, or trending.
All sources ×PortSwigger Research RSSGoogle Project ZeroUnit 42 (Palo Alto)r/netsec RSSSchneier on SecurityZero Day InitiativeMicrosoft MSRC BlogTrail of BitsnccgroupCisco TalosPentesterLand WriteupsSecurelist (Kaspersky)Cloudflare Blogr/bugbounty RSSKrebs on Security RSSSANS Internet Storm Center RSSThe Hacker News RSSbleepingGitHub Security Advisories
libreoffice-convert vulnerable to path traversal / arbitrary file write
Read →### Impact options.fileName is used to build a filesystem path (path.join(tempDir.name, fileName)) and the caller-supplied document buffer is written there, but fileName is never reduced to a base name. A fileName containing "../" escapes the temporary directory, so a caller can write arbitrary c...
Prefer original Bugflare research? Browse writeups