SEBLOD for Joomla < 3.30.0/< 4.7.0/< 6.0.1 - Path Traversal

Joomla Extension SEBLOD 3.30.0, 4.7.0, 6.0.1 contains an unauthenticated path traversal caused by improper validation of file paths, letting unauthenticated attackers download files inside and outside the webroot, exploit requires no authentication. id: CVE-2026-66914 info: name: SEBLOD for Jooml...

CVE-2022-51025

Penta Security WAPPLES versions 4.0.54.1 , 5.0 , and 6.0 are affected by a path traversal vulnerability in the /webapi/file/transfer endpoint. Authenticated attackers can exploit the name parameter by using ../ sequences and the type=db_backup parameter to download arbitrary files, such as /etc/p...

CVE-2022-51025 Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

CVE-2022-51025 Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

Penta Security Systems WAPPLES path traversal vulnerability

Versions 4.0.54.1, 5.0, and 6.0 of Penta Security Systems WAPPLES contain a path traversal vulnerability. This vulnerability stems from path traversal in the name parameter of /webapi/file/transfer. Authenticated attackers can send GET requests containing ../ sequences to download arbitrary files...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal Detection

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

CVE-2016-20081

WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the filepath parameter. Attackers can send requests to the audio-download.php endpoint with directory traversal sequences to acces...

CVE-2017-20248

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the...

CVE-2018-25421

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

PT-2026-44871

Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in the id parameter. Attackers can send GET requests to navigate download.php with path traversal payloads ../../../cfg/globals.php to...

CVE-2019-25610

NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to...

Hewlett Packard Enterprise ArubaOS security vulnerabilities

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that stems from an arbitrary file download vulnerability in the web-based management...

CVE-2025-10249: Relative Path Traversal

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above...

ROS-20251008-02

Thunderbird email client vulnerability is related to insufficient protection of service data. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to download arbitrary files...

EUVD-2023-52430

Malicious code in bioql PyPI...

EUVD-2022-31757

Malicious code in bioql PyPI...

CVE-2025-7899

The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to a user's machine. This occurs when downloading a crafted tar file via the get_file function. The vulnerability is associated with CWE-494: Download of Code Without Integrity Check . Affected products include IBM Robotic Process ...

PT-2024-16114 · Wellchoose · Administrative Management System

Name of the Vulnerable Software and Affected Versions: Administrative Management System from Wellchoose affected versions not specified Description: The Administrative Management System from Wellchoose has a Path Traversal issue, allowing unauthenticated remote attackers to exploit this...

CVE-2024-7323: Absolute Path Traversal

Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server...