Agorum core open 安全漏洞

Agorum core open is an enterprise content management system from Agorum Germany. A security vulnerability exists in Agorum core open versions prior to 11.9.2 and prior to 11.10.1, which stems from improper access control of the dynawebservice component and could lead to arbitrary file access...

CVE-2025-54310

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

USN-7646-1 rails vulnerability

It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. CVE-2019-5418...

USN-7646-1: Rails vulnerability

It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. CVE-2019-5418...

CVE-2025-5345

Bluebird devices are affected by CVE-2025-5345 in a pre-loaded file manager app. The vulnerability resides in an unsecured AIDL service, com.bluebird.system.koreanpost.IsdcardRemoteService, which allows a local attacker to bind to the service and copy or delete arbitrary files from device storage...

CVE-2025-5345 Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application

Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "com.bluebird.system.koreanpost.IsdcardRemoteService". A local attacker can bind to the AIDL-type service to copy and delete arbitrary files from device's storage with system-lev...

CVE-2025-7667

The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the 'restrict-file-access' page. This makes it possible for unauthenticated attackers to to delete arbitra...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 are documented to expose a dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term from that dictionary. This vulnerability, described across sources (including FreeBSD VuXML and NVD/CVE records), inv...

goldendict 安全漏洞

goldendict is a feature-rich dictionary lookup program from goldendict open source. A security vulnerability exists in goldendict versions 1.5.0 and 1.5.1, which stems from exposing dangerous methods that could lead to file reads and modifications...

Ubuntu 16.04 LTS / 18.04 LTS : Rails vulnerability (USN-7646-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7646-1 advisory. It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server...

goldendict -- dangerous method exposed

[email protected] reports: GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

The vulnerability of the Golang programming language lies in the incorrect definition of symbolic references before accessing files. This allows attackers to elevate their privileges within the system.

The vulnerability of the Golang programming language is related to the incorrect definition of symbolic references before accessing a file. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

CVE-2025-34118

A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers to read arbitrary files on the server. The vulnerability is accessible via multiple localized subpaths such as '/eng/',...

CVE-2025-34126

The connected sources confirm CVE-2025-34126 is a path-traversal flaw in RIPS Scanner v0.54 that allows remote attackers to read arbitrary files via the windows/code.php?file= parameter. Impact is information disclosure with network access and no privileges required per the CVSS data (AV:N/AC:L/P...

CVE-2025-34126 RIPS Scanner v0.54 Path Traversal

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This...

CVE-2025-34126 RIPS Scanner v0.54 Path Traversal

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This...

CVE-2025-34120

CVE-2025-34120 affects LimeSurvey 2.0+ through 2.06+ Build 151014. The issue arises from unvalidated serialized input to the admin backup endpoint (index.php/admin/update/sa/backup), enabling an unauthenticated attacker to craft a datasupdateinfo payload that specifies arbitrary file paths. The v...