CVE-2017-16201

The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...

CVE-2017-16094

iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16120

CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...

CVE-2017-16199

susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16171

CVE-2017-16171 affects hcbserver, a static file server, where a directory traversal vulnerability can be triggered by requesting URLs containing relative paths (e.g., ../) to access files outside the intended directory. Connected sources (GHSA/MWJ7… and OSV, Veracode, CNVD/CNVD-2018‑11655) confir...

CVE-2017-16085

CVE-2017-16085 affects the tinyserver2 static-file webserver. The vulnerability is a directory traversal flaw exposed by requests that use path components like "../../" in the URL, allowing an attacker to access files outside the intended document root. Impact is partial confidentiality (filesyst...

CVE-2017-16214

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16193

mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16223: Improper Limitation of a Pathname to a Restricted Directory

nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16186: Improper Limitation of a Pathname to a Restricted Directory

360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

dgard8.lab6 Directory Traversal Vulnerability

dgard8.lab6 is a static file server. A directory traversal vulnerability exists in dgard8.lab6. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

fancy-server path traversal vulnerability

fancy-server is a static file server. A path traversal vulnerability exists in versions of fancy-server prior to 0.1.4. An attacker can exploit this vulnerability by submitting input e.g. '. /' to read files from other directories...

static-eval Arbitrary Code Execution Vulnerability

static-eval is a module for evaluating statically analyzable expressions. A security vulnerability exists in static-eval. An attacker can exploit this vulnerability to execute arbitrary code by accessing the constructor of the global function...

yttivy directory traversal vulnerability

yttivy is a static file server. A directory traversal vulnerability exists in yttivy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2017-16224: URL Redirection to Untrusted Site

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...

CVE-2017-16120: Improper Limitation of a Pathname to a Restricted Directory

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16152: Improper Limitation of a Pathname to a Restricted Directory

static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16226: Improper Input Validation

The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution...

Cisco Wide Area Application Services Software Static SNMP Credentials Vulnerability

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Cisco Wide Area Application Services WAAS Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded,...