CVE-2024-27575

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI...

Exploit for Exposure of Resource to Wrong Sphere in N8N

Exploit for CVE-2023-27564 This vulnerability allows anonymou...

PT-2024-23308

Name of the Vulnerable Software and Affected Versions Collabora Online voilà dashboard versions prior to 0.2.17 Collabora Online voilà dashboard versions prior to 0.3.8 Collabora Online voilà dashboard versions prior to 0.4.4 Collabora Online voilà dashboard versions prior to 0.5.6 Description Th...

Exploit for CVE-2024-28247

CVE-2024-28247 Pi-hole Arbitrary File Read Description Thi...

GO-2024-2661 Arbitrary file read in github.com/grafana/grafana

An authenticated attacker that has privileges to modify the data source configurations can read arbitrary files...

Pi-hole Core < 5.18 Authenticated Arbitrary File Read Vulnerability

Pi-hole Core is prone to an authenticated arbitrary file read vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ladle 安全漏洞

Ladle is a separate package and command from Ladle, Inc. A security vulnerability exists in Ladle 2.5.1 and prior versions that originated from allowing an attacker to read user-accessible files via a GET request...

PT-2024-23239 · Apache · Apache Dolphinscheduler

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions 3.1.0 through 3.2.1 Description: A file read and write vulnerability exists in Apache DolphinScheduler, allowing authenticated users to illegally access additional resource files. Recommendations: For Apache...

CVE-2024-28247 Pihole Authenticated Arbitrary File Read with root privileges

The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered in Pihole that allows an authenticated user on the platform to read internal server files arbitrarily, and because the application runs...

Arbitrary File Read

paddlepaddle is vulnerable to External Control of File Name or Path. The vulnerability is caused due to improper input validation within paddle.vision.ops.readfile, which allows an attacker to read arbitrary files on the system...

Ajax Load More < 7.1.0 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read

Description The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 7.0.1 via the 'type' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents...

Adobe ColdFusion Arbitrary File Read Vulnerability at Audobee Software (Shanghai) Co.

Adobe ColdFusion is a dynamic web server. Adobe ColdFusion by Audobee Software Shanghai Co., Ltd. has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

GHSA-JWRC-3V3F-5CQ5 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

PaddlePaddle 安全漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle version 2.6.0, which stems from allowing arbitrary files to be read via paddle.vision.ops.readfile...