Search Vulnerabilities

SecureDrop Client has path injection in read_gzip_header_filename()

AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

An Absolute Path Traversal vulnerability exists in Navtor NavBox

Gradio has Absolute Path Traversal on Windows with Python 3.13+

bit7z has a path traversal vulnerability

Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF

HAMASTAR Technology｜MeetingHub - Arbitrary File Read

Gotac｜Police Statistics Database System - Absolute Path Traversal

Gotac｜Police Statistics Database System - Arbitrary File Read

Windows Spoofing Vulnerability

MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Traversal

Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Traversal

WELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Read

Advantech WebAccess/SCADA Absolute Path Traversal

MJML through 4

Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE

Galaxy Software Services｜Vitals ESP - Arbitrary File Read