CVE-2026-4262: Incorrect Authorization

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/ /'...

CVE-2025-49089: Improper Limitation of a Pathname to a Restricted Directory

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...

CVE-2025-49089

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...

CVE-2023-27755: Unrestricted Upload of File with Dangerous Type

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

PT-2023-21323

Name of the Vulnerable Software and Affected Versions go-bbs version 1 Description The issue is related to an arbitrary file download vulnerability. It can be exploited via the /api/v1/download API endpoint. Recommendations For go-bbs version 1, as a temporary workaround, consider disabling the...

PT-2014-2483

Name of the Vulnerable Software and Affected Versions MayGion IP Cameras versions prior to 2013.04.22 05.53 Description The issue allows remote attackers to execute arbitrary code via a long filename in a GET request to a vulnerable API endpoint, such as "/api/v1/download" or similar, by exploiti...