Search Vulnerabilities

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

Gogs: Path Traversal in organization name results in RCE through Git hooks

path traversal via `config` parameter in qSnapper

Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE

MicroCeph path traversal issue in the remote-import API

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions

Path traversal in Wertheim SafeController Software allows authenticated users to download arbitrary files

Visual Studio Code Security Feature Bypass Vulnerability

Visual Studio Code Tampering Vulnerability

OpenStack Ironic through before 35

Path Traversal in jupyter/jupyter

Interinfo｜DreamMaker - Arbitrary File Read

Interinfo｜DreamMaker - Arbitrary File Read

Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7

Apache Ignite: REST HTTP arbitrary file read vulnerability

Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir