In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file paths, an attacker can read and write files anywhere on the server, potentially leading to privilege escalation or remote code execution.
#WEB3

Top auditors compete to keep high severity bugs out of production. Start a public or private audit within 48 hours.

Compete against the world's top crypto security experts and make a name for yourself.

Guide to cryptocurrency scams. Protect your digital assets introduction.

The Ethernaut is a Web3/Solidity based wargame played in the Ethereum Virtual Machine. Each level is a smart contract that needs to be 'hacked'. The game is 100% open source and all levels are contributions made by other players.

Learn to harness next-gen technologies to build the bridges that will lead us to a better tomorrow.

Your one-stop-shop to learn all about Blockchain development and Crypto Technologies.

SecureWeb3 Academy offers online training courses to provide awareness of a range of web3 risks and threats and how to mitigate these. our training delivers the latest information and valuable insights to help you and your organisation navigate the emerging landscape of web3 technology with confidence.

Expert Bug Bounty Platform for Crypto Projects.

Think out of the box. This blog talks about computer security. Tutorials about buffer overflow, Active Directory, everything is explained with examples.

The Secure Smart Contract Development Roadmap. The essential blueprint for crafting secure protocols.

On Immunefi, hackers secure web3, save funds from theft, and get paid the world's largest bug bounties.