CVE-2025-21268: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

PT-2025-1102 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability, specifically concerning the MapUrlToZone method in Windows operating systems. This vulnerability is associated with incorrec...

CVE-2025-21189: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21332: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.

The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to improper resolution of path equivalence. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Security Zone Mapping component in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Security Zone Mapping component in Windows operating systems is related to improper resolution of path equivalence. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions...

CVE-2024-45405: Improper Resolution of Path Equivalence

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

CVE-2024-30036: Improper Resolution of Path Equivalence

Windows Deployment Services Information Disclosure Vulnerability...

CVE-2023-46169: Improper Resolution of Path Equivalence

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file. IBM X-Force ID: 269406...

CVE-2023-36396: Improper Resolution of Path Equivalence

Windows Compressed Folder Remote Code Execution Vulnerability...

CVE-2023-34092: Path Equivalence: '//multiple/leading/slash'

Vite provides frontend tooling. Prior to versions 2.9.16, 3.2.7, 4.0.5, 4.1.5, 4.2.3, and 4.3.9, Vite Server Options server.fs.deny can be bypassed using double forward-slash // allows any unauthenticated user to read file from the Vite root-path of the application including the default fs.deny...

whmcs_plugin has an unspecified vulnerability

whmcsplugin is a whmcs plugin. whmcsplugin versions prior to 0.0.4 have a security vulnerability that stems from a path equivalence parsing error in the software. No detailed vulnerability details are currently available...

CVE-2022-0855

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

Input validation

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

CVE-2022-0855

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

whmcs_plugin 安全漏洞

whmcsplugin is a whmcs plugin. whmcsplugin versions prior to 0.0.4 have a security vulnerability that stems from a path equivalence parsing error in the software. No detailed vulnerability details are currently available...

PT-2022-13474

Name of the Vulnerable Software and Affected Versions whmcs plugin versions prior to 0.0.4 Description The issue is related to improper resolution of path equivalence in the GitHub repository microweber-dev/whmcs plugin. Recommendations For versions prior to 0.0.4, update to version 0.0.4 or late...

CVE-2022-0855: Improper Resolution of Path Equivalence

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

The vulnerability of the LibreLogo software module of the LibreOffice office software package allows a hacker to execute arbitrary code on the target system.

The vulnerability of the LibreLogo software module in the LibreOffice office software package stems from errors in calculating path equivalence. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted file...

CVE-2019-9855

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...