CVE-2025-34119

A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...

CVE-2025-34119 EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43

A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...

CVE-2025-34119

CVE-2025-34119 affects EasyCafe Server 2.2.14. A remote, unauthenticated file-disclosure exists via a custom protocol on TCP port 831, using opcode 0x43 to request files by absolute path. If the targeted file exists, its contents are returned without authentication, potentially exposing system co...

CVE-2025-34119 EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43

A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...

PT-2025-29882 · Unknown · Easycafe Server

Name of the Vulnerable Software and Affected Versions: EasyCafe Server version 2.2.14 Description: A remote file disclosure issue exists in EasyCafe Server. An unauthenticated remote attacker can request arbitrary files via TCP port 831 using opcode 0x43, potentially retrieving sensitive...

Tinasoft EasyCafe Server security vulnerabilities

Tinasoft EasyCafe Server is a billing server-side software for coffee, internet cafes, etc. from Tinasoft Vietnam. A security vulnerability exists in Tinasoft EasyCafe Server version 2.2.14, which originates from a remote file disclosure and could result in reading sensitive information such as...

CVE-2025-34119: Exposure of Resource to Wrong Sphere

A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...

Exploit for CVE-2025-49493

CVE-2025-49493 Akamai CloudTest - XXE Injection ☁️ 📄 Descr...

CVE-2024-35474

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...

CVE-2021-37178

A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...

CVE-2020-11579

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php part of the installation process allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...

tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

A flaw was found in Apache Tomcat. In certain conditions and configurations, this vulnerability allows a remote attacker to exploit a path equivalence flaw to view file system contents and add malicious content via a write-enabled Default Servlet in Apache Tomcat. For the vulnerability to be...

Synology DiskStation Manager security vulnerabilities

Synology DiskStation Manager DSM is an operating system for use on networked storage servers NAS from Synology, a Chinese company. This operating system manages information such as data, files, photos, music, and other information. A security vulnerability exists in Synology DiskStation Manager,...

Oracle Agile Product Lifecycle Management (PLM) 9.3.6.x < 9.3.6.28.3 (CVE-2024-21287)

The version of Oracle Agile Product Lifecycle Management PLM on the remote host is 9.3.6.x prior to 9.3.6.28.3. It is, therefore, affected by an unauthenticated remote file disclosure vulnerability: - Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain component: Softwa...

php: XML loading external entity without being enabled

A flaw was found in PHP due to inadequate validation of user-supplied XML input. By leveraging specially crafted XML code, a remote attacker could obtain sensitive information by viewing the contents of arbitrary files on the system or initiating requests to external systems. This issue may allow...

TYPO3 Sa-2010-020 Remote File Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TYPO3 sa-2010-020 Remote File Disclosure', 'Description' = %q This module exploits a flaw in the way the TYPO3 jumpurl feature matches hashes. Du...

PT-2024-26512 · Unknown · Iceice666 Resourcepack Server

Name of the Vulnerable Software and Affected Versions: iceice666 ResourcePack Server versions prior to 1.0.8 Description: A Directory Traversal issue allows a remote attacker to disclose files on the server. The issue is related to the setPath in ResourcePackFileServer.kt. Recommendations: For...

CVE-2024-35474

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...

VulnCheck KEV: CVE-2017-15363

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...

Fortinet FortiWLM Path Traversal

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files using specially creat...