Directory Traversal

Overview fast-filesystem-mcp is a Fast Filesystem MCP Server - Advanced file operations with Auto-Chunking, Sequential Reading, complex file operations copy, move, delete, batch, compress, optimized for Claude Desktop Affected versions of this package are vulnerable to Directory Traversal via the...

The vulnerability of the DotNetZip library for working with zip files relates to incorrect restrictions on the path to the restricted directory. This allows a malicious actor to execute arbitrary code.

The vulnerability of the DotNetZip library for working with zip files is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

WordPress plugin Tuturn 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

WordPress plugin Download Counter 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

EUVD-2019-3407

Malware in sbrugna...

The vulnerability of the Python programming language interpreter, related to improper restriction of the path to a limited directory, allows attackers to gain access and modify any arbitrary file in the system.

The vulnerability of the Python programming language interpreter is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and modify any arbitrary file in the system...

The vulnerability of the tarfile module in the CPython interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the CPython interpreter, related to incorrect restrictions on path names to restricted directories, allows attackers to compromise the integrity of protected information.

The vulnerability of the CPython interpreter is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

BIT-LIBPYTHON-2020-15801

In Python 3.8.4, sys.path restrictions specified in a python38.pth file are ignored, allowing code to be loaded from arbitrary locations. The .pth file e.g., the python.pth file is not affected...

The vulnerability of the libxpc component in macOS operating systems allows attackers to increase their privileges.

The vulnerability of the libxpc component in macOS operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the CSV file processor in the Django web development software platform allows a hacker to execute arbitrary code.

The vulnerability of the Django web application development platform’s CSV file processor is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code by introducing it into a specially crafted CSV...

Microsoft SharePoint Server Spoofing Vulnerability

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the incorrect path name restrictions for the restricted access catalog, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...

Microsoft SharePoint Server 授权问题漏洞

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...

WordPress plugin HTML5 Radio Player - WPBakery Page Builder Addon 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress HTML5 Radio Player-WPBakery Page Builder Addon, which stems from improperly restricted pathnames, and no detailed...

The vulnerability of the Jenkins continuous integration server’s HTML plugin arises from incorrect path name restrictions for the catalog directory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the software tool for collecting network performance and Cisco ThousandEyes Endpoint Agent application data on Windows operating systems arises from incorrect path name restrictions for restricted access directories. This allows attackers to delete any files they desire.

The vulnerability of the software tool for collecting network performance data and the Cisco ThousandEyes Endpoint Agent for Windows operating systems is related to an incorrect path limitation in the access control list. Exploiting this vulnerability could allow a malicious individual to delete...

Directory Traversal

Overview llama-index-readers-obsidian is a llama-index readers obsidian integration Affected versions of this package are vulnerable to Directory Traversal via the loaddata method in the ObsidianReader class. An attacker can access sensitive system files by exploiting hardlinks to bypass path...