CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2026/03/26 12:00 a.m.•1 views

CVE-2026-4262: Incorrect Authorization

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/ /'...

6.9CVSS5.8AI score0.00406EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-49089: Improper Limitation of a Pathname to a Restricted Directory

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...

6.3CVSS5.8AI score0.00314EPSS

SaveExploits0References1

Cvelist•added 2023/04/17 12:00 a.m.•48 views

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

9AI score0.00789EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2023/04/17 12:00 a.m.•1 views

CVE-2023-27755: Unrestricted Upload of File with Dangerous Type

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

8.8CVSS5.9AI score0.00789EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by