Vulnerabilities
Redash flaw lets users read secrets and write files via DuckDB
A critical vulnerability in Redash versions 26.0.0 through 26.9.0 allows attackers with query access to steal application secrets and write files to the server.
CVSS 9.3
Everything CloudSec Pulse has reported about CVSS 9.3: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Organizations at Risk: sandboxed.sh 1.3.0 Flaw Lets Attackers Read and Modify Host Files
A flaw in sandboxed.sh versions up to 1.3.0 allows container code to bypass isolation and access host files, creating severe security risks for organizations using the tool.