Search Vulnerabilities

Path Traversal Vulnerability in ZTE Blade A75 5G

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' P...

Datasets Path Traversal via Unsanitized file_name Metadata

BlenderMCP Path Traversal via download_polyhaven_asset API

Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter

Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController

DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

Path traversal via non-tar copyDirectoryFromPod

Diffusers Path Traversal via weight_map Arbitrary File Read

Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload

Vanna 2.0.2 Path Traversal via FileSystemConversationStore

SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route

h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API

Void 1.3.4 Path Traversal via AI Agent File-Reading Tools

Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

Bold Reports Standalone Report Designer < 14.1.12 Path Traversal RCE via File Upload

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing