VulnCheck KEV: CVE-2025-11913

A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this vulnerability is the function Download of the file /Service.do?Action=Download. Such manipulation of the argument Path leads to path traversal. The attack can be launched remotely. The exploit h...

CVE-2025-11913: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this vulnerability is the function Download of the file /Service.do?Action=Download. Such manipulation of the argument Path leads to path traversal. The attack can be launched remotely. The exploit h...

PT-2025-42648

Name of the Vulnerable Software and Affected Versions Shenzhen Ruiming Technology Streamax Crocus version 1.3.40 Description A path traversal issue exists due to manipulation of the Path argument in the Download function via the /Service.do?Action=Download endpoint. This allows for remote...