Lucene search
+L

6550 matches found

Vulnrichment
Vulnrichment
added 2025/03/25 6:48 p.m.16 views

CVE-2025-30567 WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

7.5CVSS5.2AI score0.02815EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/25 6:40 p.m.7 views

WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by timomangcut in WordPress Plugin WP01 versions = 2.6.2...

7.5CVSS6.9AI score0.02815EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/03/25 6:15 a.m.7 views

CVE-2024-13617

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

8.6CVSS5.9AI score0.00444EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/25 6:15 a.m.17 views

CVE-2024-13617

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

8.6CVSS0.00444EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/25 6:0 a.m.8 views

CVE-2024-13617 Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

7.2AI score0.00444EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/25 6:0 a.m.65 views

CVE-2024-13617

CVE-2024-13617 concerns the aoa-downloadable WordPress plugin (

8.6CVSS7AI score0.00444EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/03/25 6:0 a.m.23 views

CVE-2024-13617 Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

0.00444EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/03/25 12:0 a.m.16 views

PT-2025-12756 · WordPress · Aoa-Downloadable

Name of the Vulnerable Software and Affected Versions: aoa-downloadable WordPress plugin version 0.1.0 Description: The issue concerns the aoa-downloadable WordPress plugin, which fails to validate a parameter in its download function. This allows unauthenticated attackers to download arbitrary...

8.6CVSS9.4AI score0.00444EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/25 12:0 a.m.6 views

WordPress plugin aoa-downloadable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

8.6CVSS8.7AI score0.00444EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.26 views

The vulnerability of the Slider Revolution plugin for WordPress content management systems, related to the unlimited loading of dangerous files, allows a hacker to upload any type of files they want.

The vulnerability of the Slider Revolution plugin for WordPress content management systems is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...

9CVSS7.8AI score0.0069EPSS
SaveExploits0References5Affected Software1
Packet Storm
Packet Storm
added 2025/03/24 12:0 a.m.143 views

Jasmin Ransomware Arbitrary File Download

Jasmin Ransomware suffers from an arbitrary file download vulnerability. Exploit Title: Jasmin Ransomware - Authenticated Arbitrary File Download Google Dork: N/A Date: 22-03-2025 Exploit Author: bRpsd cyatlive.no Vendor Homepage: https://github.com/codesiddhant/Jasmin-Ransomware Software Link:...

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/03/22 11:22 a.m.14 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.00952EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2025/03/20 12:32 p.m.16 views

AgentScope arbitrary file download vulnerability in rpc_agent_client

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7AI score0.00952EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/03/20 12:32 p.m.34 views

GHSA-P6H7-HFJ2-VMCF AgentScope arbitrary file download vulnerability in rpc_agent_client

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

7.5CVSS7.3AI score0.00952EPSS
SaveExploits1References4
NVD
NVD
added 2025/03/20 10:15 a.m.21 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS0.00952EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/20 10:15 a.m.11 views

PYSEC-2025-82

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.00952EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/20 10:15 a.m.6 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS5.9AI score0.00952EPSS
SaveExploits1References1
PyPA
PyPA
added 2025/03/20 10:15 a.m.15 views

PYSEC-2025-82

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.00952EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2025/03/20 10:8 a.m.61 views

CVE-2024-8501

Summary : CVE-2024-8501 affects the modelscope/agentscope project, specifically the rpc_agent_client component in version v0.0.4. The vulnerability permits an attacker to leverage the download_file method to download arbitrary files from the rpc_agent host. Impact : This can lead to unauthorized ...

8.8CVSS7.7AI score0.00952EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/03/20 10:8 a.m.26 views

CVE-2024-8501 Arbitrary File Download in modelscope/agentscope

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

7.5CVSS0.00952EPSS
SaveExploits1References1
Rows per page
Query Builder