CVE-2025-11490: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from...

EUVD-2025-8036

Malicious code in bioql PyPI...

CVE-2025-7552: Improper Access Control

A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the component Path Handler. The manipulation ...

CVE-2025-7552 Dromara Northstar Path AuthorizationInterceptor.java preHandle access control

A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the component Path Handler. The manipulation ...

CVE-2025-7552

A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the component Path Handler. The manipulation ...

CVE-2025-2716

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-2716

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-2716 China Mobile P22g-CIac Samba Path path traversal

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-2716 China Mobile P22g-CIac Samba Path path traversal

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-2716

CVE-2025-2716 affects China Mobile P22g-CIac 1.0.00.488. According to multiple sources, the vulnerability originates from an issue in the Samba Path Handler component, enabling path traversal. The attack is described as remote and publicly disclosed, with the vendor reportedly unresponsive. The C...

CVE-2025-2716: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

PT-2025-12682

Name of the Vulnerable Software and Affected Versions China Mobile P22g-CIac version 1.0.00.488 Description A vulnerability was found in the Samba Path Handler component, affecting unknown code. The manipulation leads to path traversal, and the attack can be initiated remotely. The exploit has be...

CVE-2025-2618 D-Link DAP-1620 Path api set_ws_action heap-based overflow

A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function setwsaction of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit...

CVE-2025-2618: Heap-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function setwsaction of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit...

PT-2025-12489

Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 version 1.03 Description A critical issue has been found in the function set ws action of the file /dws/api/ of the component Path Handler, leading to a heap-based buffer overflow. This issue can be exploited remotely. The...

CVE-2022-25358

A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories not read files. This occurs because the safe-path? Scheme predicate is not used for directories...

PT-2022-17237

Name of the Vulnerable Software and Affected Versions awful-salmonella-tar versions prior to 0.0.4 Description A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar. Attackers can only list directories, not read files. This occurs because the safe-path? Scheme...

PT-2006-5230 · Phlymail · Phlymail Lite

Name of the Vulnerable Software and Affected Versions: PHlyMail Lite versions 3.4.4 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the PM pathhandler parameter. This is a different attack vector. Note that this issue has been...

CVE-2006-4429: Undefined Security Weakness

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...