EUVD-2025-12096

Malicious code in bioql PyPI...

CVE-2025-30040

The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...

CVE-2025-9345

CVE-2025-9345 : Path Traversal to Arbitrary File Download in the WordPress plugin “File Manager, Code Editor, and Backup by Managefy.” Affected versions: all up to 1.4.8. Root cause per sources: authenticated users (Subscriber level and higher) can leverage ajax_downloadfile() to access files out...

The vulnerability in the downloadFile.cgi script of the TOTOLINK A800R router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)

The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...

Malicious code in mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi (npm)

The package mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi was found to contain malicious code...

MAL-2025-13907 Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)

The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...

MAL-2025-26795 Malicious code in mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu (npm)

The package mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu was found to contain malicious code...

MAL-2025-13906 Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)

The package a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca was found to contain malicious code...

MAL-2025-26796 Malicious code in mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd (npm)

The package mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd was found to contain malicious code...

Malicious code in mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg (npm)

The package mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg was found to contain malicious code...

MAL-2025-13903 Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm)

The package a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo was found to contain malicious code...

MAL-2025-13904 Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)

The package a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc was found to contain malicious code...

MAL-2025-13913 Malicious code in a-lbum-do-wnload-avai-lable-file-nevermind-1-6utup-ncqpuh (npm)

The package a-lbum-do-wnload-avai-lable-file-nevermind-1-6utup-ncqpuh was found to contain malicious code...

MAL-2025-26794 Malicious code in mp3-do-wnload-file-to-day-30879-fight-less-win-more-xgv8l-jeyujj (npm)

The package mp3-do-wnload-file-to-day-30879-fight-less-win-more-xgv8l-jeyujj was found to contain malicious code...

MAL-2025-26793 Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)

The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...

Relative Path Traversal

Overview assemblyline-service-client is an Assemblyline 4 - Service client Affected versions of this package are vulnerable to Relative Path Traversal via the downloadfile function in the taskhandler.py. An attacker can overwrite arbitrary files, corrupt system files, or potentially execute code ...

Simple forum forum_downloadfile.php path traversal vulnerability

Simple forum is a simple forum. Simple forum suffers from a path traversal vulnerability, which stems from the parameter filename in the file /forumdownloadfile.php failing to properly filter for special elements in the path of a resource or file. An attacker can exploit this vulnerability to cau...

CVE-2025-48781: External Control of File Name or Path

An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths...