Directory traversal

cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Cross site request forgery (csrf)

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...

Directory traversal

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

liuyaserver is a static file server. liuyaserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

pytservce is a static file server. pytservce is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

serverzyy is a static file server. serverzyy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Code injection

The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution...

Directory traversal

calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16210

jnjjserver is a static file server. jnjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16180

CVE-2017-16180 is a vulnerability in the static file server serverabc where a URL containing directory traversal sequences (e.g., ../) allows attackers to access the host filesystem. Public datasheets describe the issue as a path traversal that can disclose private files (example: GET /../../../....

CVE-2017-16195

CVE-2017-16195 affects pytservce, a static file server, due to a directory traversal flaw where a URL containing relative paths (for example, ../../) can access the filesystem. Multiple connected sources (GHSA, OSV, CNVD, Veracode, NVD mirror) describe the vulnerability as a directory traversal i...

CVE-2017-16200

The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...

CVE-2017-16084

list-n-stream is a server for static files to list and stream local videos. list-n-stream v0.0.10 or lower is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16084

CVE-2017-16084 affects list-n-stream, a server for static files to list and stream local videos, with directory traversal in versions

CVE-2017-16190

Details show that the static file server dcdcdcdcdc is affected by a directory traversal vulnerability. An attacker can access the filesystem by placing relative path sequences (e.g., "../" or similar encodings) in the request URL, potentially escaping the intended document root. This is document...

CVE-2017-16190

dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16223

CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...