Lucene search
+L

5 matches found

NVD
NVD
•added 2025/12/29 7:15 p.m.•19 views

CVE-2025-14728

Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to...

6.8CVSS0.0056EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/29 7:04 p.m.•59 views

CVE-2025-14728 Rapid7 Velociraptor Directory Traversal Vulnerability

Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to...

6.8CVSS0.0056EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/12/29 7:04 p.m.•5 views

CVE-2025-14728 Rapid7 Velociraptor Directory Traversal Vulnerability

Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to...

6.8CVSS5.8AI score0.0056EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/29 7:04 p.m.•18 views

CVE-2025-14728 Rapid7 Velociraptor Directory Traversal Vulnerability

Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to...

6.8CVSS6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•1 views

CVE-2025-14728: Improper Limitation of a Pathname to a Restricted Directory

Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to...

6.8CVSS5.8AI score0.0056EPSS
SaveExploits1References1
Rows per page
Query Builder