-
Notifications
You must be signed in to change notification settings - Fork 14
Pull requests: r0path/demorepo1
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Remote code execution via Flask debug mode enabled - High
#274
opened Jul 25, 2025 by
zeropath-ai-dev
bot
Loading…
Remote Code Execution via /login endpoint - Critical
#272
opened Jul 11, 2025 by
zeropath-ai-dev
bot
Loading…
Remote Code Execution via eval() on user input - Critical
#270
opened Jul 10, 2025 by
zeropath-ai-dev
bot
Loading…
Create test.py (secret detection not internet connected validation test)
#268
opened Jul 10, 2025 by
rek7
Loading…
Shell Injection via os.system() in get_user() - Critical
#264
opened Jul 8, 2025 by
zeropath-ai-dev
bot
Loading…
Fix access control vulnerability in get_note endpoint by restricting note access to the authenticated user only.
#237
opened Jun 26, 2025 by
zeropath-ai-dev
bot
Loading…
Fix command injection in login handler by removing insecure os.system(password) call
#236
opened Jun 26, 2025 by
zeropath-ai-dev
bot
Loading…
Fix XSS vulnerability by sanitizing 'search' GET parameter with htmlspecialchars in index.php
#225
opened Jun 24, 2025 by
zeropath-ai-dev
bot
Loading…
Fix OS Command Injection by removing unsafe execution of user-controlled 'username' input.
#215
opened Jun 17, 2025 by
zeropath-ai-dev
bot
Loading…
Fix OS Command Injection vulnerability by removing insecure os.system() call with unsanitized user input.
#214
opened Jun 12, 2025 by
zeropath-ai-dev
bot
Loading…
Add endpoint comments to the login function to document authentication behavior and response codes.
#206
opened Jun 6, 2025 by
zeropath-ai-dev
bot
Loading…
Add missing comment for login function endpoint and remove insecure system call to enhance security.
#204
opened Jun 5, 2025 by
zeropath-ai-dev
bot
Loading…
Fix: Remove unsafe os.system and subprocess calls to prevent remote command execution (RCE) vulnerability in Python application.
#198
opened Jun 4, 2025 by
zeropath-ai-dev
bot
Loading…
Fix command injection vulnerability by removing unsafe
os.system call in password handling.
#197
opened Jun 4, 2025 by
zeropath-ai-dev
bot
Loading…
Fix command injection vulnerability by replacing 'os.system' with safer 'subprocess' module in Python application.
#195
opened Jun 4, 2025 by
zeropath-ai
bot
Loading…
Fix command injection vulnerability by replacing
os.system calls with secure subprocess module in Python application.
#196
opened Jun 4, 2025 by
zeropath-ai
bot
Loading…
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.