Search Vulnerabilities

Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

ERPNext: Path Traversal Leading to Sensitive File Exposure

Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules`

Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root

Hermes WebUI < 0.51.44 - Release T Path Traversal via Session Import Endpoint

Joomla com_fabrik 3.9.11 Directory Traversal via image.php

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authen...

BIG-IQ iControl REST vulnerability

BIG-IP SSL Orchestrator vulnerability

Mako: Path traversal via backslash URI on Windows in TemplateLookup

Hugo: Node tool execution allows file system access outside the project directory

Heym < 0.0.21 Path Traversal File Upload via upload_file()

django-s3file: Relative path traversal

Pulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files

Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution

Substance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Langflow: Path Traversal in Langflow Knowledge Bases API

Visual Studio Code Information Disclosure Vulnerability

JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation