Lucene search
+L

7862 matches found

Cvelist
Cvelist
•added 2025/03/25 6:48 p.m.•252 views

CVE-2025-30567 WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

7.5CVSS0.02834EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/25 6:40 p.m.•18 views

WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by timomangcut in WordPress Plugin WP01 versions = 2.6.2...

7.5CVSS6.9AI score0.02834EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/25 6:15 a.m.•27 views

CVE-2024-13617

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

8.6CVSS0.00471EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/25 6:15 a.m.•16 views

CVE-2024-13617

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

8.6CVSS5.9AI score0.00471EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/25 6:00 a.m.•10 views

CVE-2024-13617 Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

7.2AI score0.00471EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/25 6:00 a.m.•32 views

CVE-2024-13617 Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

0.00471EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/25 6:00 a.m.•77 views

CVE-2024-13617

The aoa-downloadable WordPress plugin, affecting versions 0.1.0 and earlier , contains an unauthenticated arbitrary file download vulnerability. The root cause is a failure to validate a parameter within the plugin's download function , which allows an attacker to retrieve arbitrary files from th...

8.6CVSS7AI score0.00471EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/25 12:00 a.m.•35 views

The vulnerability of the Slider Revolution plugin for WordPress content management systems, related to the unlimited loading of dangerous files, allows a hacker to upload any type of files they want.

The vulnerability of the Slider Revolution plugin for WordPress content management systems is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...

9CVSS7.8AI score0.0069EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•24 views

PT-2025-12756 · WordPress · Aoa-Downloadable

Name of the Vulnerable Software and Affected Versions: aoa-downloadable WordPress plugin version 0.1.0 Description: The issue concerns the aoa-downloadable WordPress plugin, which fails to validate a parameter in its download function. This allows unauthenticated attackers to download arbitrary...

8.6CVSS9.4AI score0.00471EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•15 views

WordPress plugin aoa-downloadable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

8.6CVSS8.7AI score0.00471EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•8 views

CVE-2024-13617: Undefined Security Weakness

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

8.6CVSS5.9AI score0.00471EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2025/03/24 12:00 a.m.•149 views

Jasmin Ransomware Arbitrary File Download

Jasmin Ransomware suffers from an arbitrary file download vulnerability. Exploit Title: Jasmin Ransomware - Authenticated Arbitrary File Download Google Dork: N/A Date: 22-03-2025 Exploit Author: bRpsd cyatlive.no Vendor Homepage: https://github.com/codesiddhant/Jasmin-Ransomware Software Link:...

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/22 11:22 a.m.•19 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.01031EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•23 views

AgentScope arbitrary file download vulnerability in rpc_agent_client

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7AI score0.01031EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/03/20 12:32 p.m.•45 views

GHSA-P6H7-HFJ2-VMCF AgentScope arbitrary file download vulnerability in rpc_agent_client

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

7.5CVSS7.3AI score0.01031EPSS
SaveExploits1References4
PyPA
PyPA
•added 2025/03/20 10:15 a.m.•24 views

PYSEC-2025-82

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.01031EPSS
SaveExploits1References2Affected Software1
osv-pysec
osv-pysec
•added 2025/03/20 10:15 a.m.•22 views

PYSEC-2025-82

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS7.2AI score0.01031EPSS
SaveExploits1References2
NVD
NVD
•added 2025/03/20 10:15 a.m.•30 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS0.01031EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/20 10:15 a.m.•18 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS5.9AI score0.01031EPSS
SaveExploits1References1
Mend
Mend
•added 2025/03/20 10:08 a.m.•3 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpcagentclient component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpcagent's host by exploiting the downloadfile method. This can lead to unauthorized access to sensitive...

8.8CVSS0.01031EPSS
SaveExploits1References5
Rows per page
Query Builder