Search Vulnerabilities

Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE

Silverpeas through 6

Interinfo｜DreamMaker - Path Traversal

ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/

A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replicatio...

Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter

.NET Core Tampering Vulnerability

pyLoad: Path Traversal via Package Folder Name in set_package_data

PaperCut NG/MF: Path Traversal in Shared Account Synchronization

An issue was discovered in Nix before 2

Deepractice PromptX Document File index.ts read_pdf absolute path traversal

SecureDrop Client has path injection in read_gzip_header_filename()

AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

An Absolute Path Traversal vulnerability exists in Navtor NavBox

Gradio has Absolute Path Traversal on Windows with Python 3.13+

bit7z has a path traversal vulnerability

Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF

HAMASTAR Technology｜MeetingHub - Arbitrary File Read