Search Vulnerabilities

AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import

PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)

IceWarp collaboration Directory Traversal Information Disclosure Vulnerability

Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability

Unraid Update Request Path Traversal Remote Code Execution Vulnerability

Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution

SFTPGo improperly sanitizes placeholders in group home directories/key prefixes

SFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy

calibre has a Path Traversal Leading to Arbitrary File Write

Arbitrary File Write via Path Traversal in Google clasp leading to RCE

Apache Livy: Unauthorized directory access

SFTP root escape via component-agnostic prefix check in ssh_sftpd

Black: Arbitrary file writes from unsanitized user input in cache file name

ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink

Dataease: Redshift JDBC RCE Bypass

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Path Traversal in Media Upload Handle in Tina

Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS

Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

Path Traversal in @tinacms/graphql