87 matches found
EUVD-2026-66802
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
CVE-2026-75327
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
CVE-2026-75327
DocSys-master V2.02.85 contains an arbitrary file upload vulnerability in the uploadMarkdownPic interface located at src/com/DocSystem/controller/DocController.java. The flaw is remotely exploitable with low complexity , requires no privileges or user interaction, and carries a CVSS 3.1 score of ...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
EUVD-2026-66701
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
CVE-2026-75327
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
EUVD-2026-66749
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
CVE-2026-75413
DocSys V2.02.80 contains an Any File Download vulnerability in the downloadDocEx.do interface. An unauthenticated attacker can exploit the targetPath parameter to download arbitrary files over the network without any prior authentication. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network at...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
PT-2026-82319
Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file read issue exists in the 'downloadDocEx' interface located in src/com/DocSystem/controller/DocController.java. This allows an attacker to read files from the system that they should n...
CVE-2026-75328
DocSys-master V2.02.85 is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The vulnerability is reachable over the network with no authentication required , yielding a CVSS 3.1 score of 7.5 (HIGH) with high...
CVE-2026-67678
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
CVE-2026-67678
DocSys v.2.02.80 (RainyGao-GitHub) has an unauthenticated file upload flaw allowing arbitrary code execution; CISA flags it as automatable with total impact (CVSS 9.8). No patch version is specified in the provided documents. Exploitation details are not provided, though a PoC is referenced in th...
PT-2026-76772
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
CVE-2026-67678
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
CVE-2026-67678
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...