PT-2018-6133

Name of the Vulnerable Software and Affected Versions: citypredict.whauwiller affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling the attack...

PT-2018-6169

Name of the Vulnerable Software and Affected Versions: infraserver versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor...

PT-2018-6244

Name of the Vulnerable Software and Affected Versions: tencent-server versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the disclosure of privat...

PT-2018-6193

Name of the Vulnerable Software and Affected Versions: byucslabsix affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside...

PT-2018-6207

Name of the Vulnerable Software and Affected Versions: serverabc affected versions not specified Description: The issue concerns a directory traversal vulnerability. This vulnerability allows an attacker to access the filesystem by manipulating the URL with "../" entries, potentially leading to t...

PT-2018-6181

Name of the Vulnerable Software and Affected Versions: earlybird versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling the attacker t...

PT-2018-6242

Name of the Vulnerable Software and Affected Versions: peiserver versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor t...

PT-2018-6220

Name of the Vulnerable Software and Affected Versions: mfrs affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the disclosure of private files on the...

PT-2018-6235

Name of the Vulnerable Software and Affected Versions: dmmcquay.lab6 affected versions not specified Description: The issue concerns a directory traversal vulnerability. This vulnerability allows an attacker to access the filesystem by manipulating the URL with "../" entries, potentially leading ...

PT-2018-6199

Name of the Vulnerable Software and Affected Versions: section2.madisonjbrooks12 affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to...

GE MDS PulseNET and MDS PulseNET Enterprise Directory Traversal Vulnerability

GE MDS PulseNET and MDS PulseNET Enterprise are both products of General Electric GE.GE MDS PulseNET is a suite of network management software designed specifically for radio communication systems.MDS PulseNET Enterprise is its enterprise version. A directory traversal vulnerability exists in GE...

PT-2018-6063

Name of the Vulnerable Software and Affected Versions: badjs-sourcemap-server versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling t...

PT-2018-6059

Name of the Vulnerable Software and Affected Versions: hostr versions 2.3.5 and earlier Description: There is a directory traversal issue that allows an attacker to read files outside the current directory by sending ../ in the URL path for GET requests. This enables attackers to access files the...

PT-2018-5157

Name of the Vulnerable Software and Affected Versions augustine affected versions not specified Description The issue arises from a lack of validation of URLs in the augustine node module, leading to a Path Traversal vulnerability. This allows a malicious user to read the content of any file with...

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

PT-2018-4155

Name of the Vulnerable Software and Affected Versions fancy-server versions prior to 0.1.4 Description The issue allows an attacker to perform a directory traversal attack by providing input such as ../ to read files outside of the served directory. This can be achieved through standard attack...

CVE-2014-10068: Improper Limitation of a Pathname to a Restricted Directory

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when showHidden is false...

Drupal Avatar Uploader File Disclosure

File disclosure vulnerability in Drupal Avatar Uploader module Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

IBM Flashsystem File Disclosure

File disclosure vulnerability in IBM Flashsystem DownloadFile Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2018-10832: Improper Restriction of XML External Entity Reference

ModbusPal 1.6b is vulnerable to an XML External Entity XXE attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will retu...