CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Programm: phpBB 2.0.12 Homepage: http://www.phpbb.com Verwundbare Versionen: phpBB 2.0.12 und niedrigere Versionen Risiko: Geringes Risiko!! Auswirkung: Offenlegung des vollständigen Pfads root@kitploit:...

wphunter

WPHunter Tool ☣ WPHunter – Ein WordPress Vulnerability Scanner Du kannst dieses Tool auf deiner WordPress-Website verwenden, um die Sicherheit deiner Website zu überprüfen, indem du die Schwachstellen in deiner Website findest. Über 75 Millionen Websites laufen auf WordPress, das nun 26% des Webs...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev erlaubt die Offenlegung des vollständigen Pfads Full Path Disclosure, selbst wenn die Fehlerprotokollierung auf None gesetzt ist, falls der Wert von hashsalt per filegetcontents aus einer nicht vorhandenen Datei stammt...

CVE-2026-37069

CVE-2026-37069 Divulgação de Caminho Absoluto em /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php no Veno File Manager Project 4.4.9 permite que um atacante não autenticado saiba em qual diretório do sistema o código do aplicativo está sendo executado, enviando uma...

CVE-2024-45440

Ferramenta de enumeração para CVE-2024-45440 por DividesByZer0 & c0d3Ninja CVE-2024-45440 - PoC de Divulgação de Caminho Completo em Drupal 11.x-dev opções: -h, --help mostra esta mensagem de ajuda e sai -u URL, --url URL URL única para verificar. -f FILE, --file FILE Arquivo contendo URLs para...

WPintel

Funcionalidades • Instalação • Usar • Licença • Baixar Demonstração em Vídeo Funcionalidades Detectar versão do WordPress Detectar vulnerabilidades da versão Enumerar usuários Detectar temas Detectar plugins Encontrar divulgação completa do caminho Verificar status de registro de usuário Instalaç...

CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

Drupal 11.x-dev - Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...

Langflow < 1.9.1 - Unauthenticated File Upload

Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

DedeCMS 5.7 - Path Disclosure

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...

emlog 5.3.1 Path Disclosure

emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...

WP Popups - Information Disclosure

WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

CVE-2025-6082

CVE-2025-6082 Full Path Disclosure PoC Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Schwachstelle : Full Path Disclosure CWE-200 Beschreibung Dieser Proof‑of‑Concept nutzt einen Full‑Path‑Disclosure‑Fehler im Birth Chart Compatibility WordPress-Plugin Versionen ≤ 2.0. Der POC...

CVE-2001-0934

CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 permet à des attaquants distants d'obtenir le chemin physique de la racine du serveur via la commande pwd, qui liste le chemin complet. Publication Securiteam sur http://www.securiteam.com/exploits/6D00L2A35K.html Informations externes sur...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! Erweiterung params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR;...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

EUVD-2026-58053

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-73555

CVE-2026-73555 affects vLLM prior to 0.26.0. The issue arises in the validation_exception_handler (vllm/entrypoints/openai/server_utils.py) which converts FastAPI RequestValidationError objects with str(exc), and in sanitize_message (vllm/entrypoints/utils.py) which does not remove traceback-styl...