30273 matches found
CVE-2025-34126 RIPS Scanner v0.54 Path Traversal
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This...
CVE-2025-34119 EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43
A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...
CVE-2025-34119
CVE-2025-34119 affects EasyCafe Server 2.2.14. A remote, unauthenticated file-disclosure exists via a custom protocol on TCP port 831, using opcode 0x43 to request files by absolute path. If the targeted file exists, its contents are returned without authentication, potentially exposing system co...
CVE-2025-34119 EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43
A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its...
CVE-2025-54015 WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows PHP Local File Inclusion.This issue affects HT Contact Form 7: from n/a through = 2.0.0...
PT-2025-29882 · Unknown · Easycafe Server
Name of the Vulnerable Software and Affected Versions: EasyCafe Server version 2.2.14 Description: A remote file disclosure issue exists in EasyCafe Server. An unauthenticated remote attacker can request arbitrary files via TCP port 831 using opcode 0x43, potentially retrieving sensitive...
PT-2025-29747 · Unknown · Contact Form 7
Name of the Vulnerable Software and Affected Versions: HT Contact Form 7 versions n/a through 2.0.0 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...
Tinasoft EasyCafe Server 安全漏洞
Tinasoft EasyCafe Server is a billing server-side software for coffee, internet cafes, etc. from Tinasoft Vietnam. A security vulnerability exists in Tinasoft EasyCafe Server version 2.2.14, which originates from a remote file disclosure and could result in reading sensitive information such as...
The vulnerability of the ColdFusion software platform, related to errors in XML request processing, allows attackers to read arbitrary files.
The vulnerability of the ColdFusion software platform is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...
CVE-2025-7477
A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2025-7470
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...
CVE-2025-44177
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences...
CVE-2025-44177
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences...
The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), which is used for collecting user authentication data, allows a perpetrator to load arbitrary files.
The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which acts as a virtual authentication data collection device, is related to deficiencies in access control. Exploiting this vulnerability could...
CVE-2025-44177
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences...
CVE-2025-44177
Summary (concrete details from connected docs): White Star Software Protop (version 4.4.2-2024-11-27) is vulnerable to a directory traversal in the /pt3upd/ endpoint. An unauthenticated attacker can read arbitrary files on the OS by using encoded traversal sequences (e.g., URL-encoded payloads). ...
CVE-2025-6806
CVE-2025-6806 – Marvell QConvergeConsole decryptFile Directory Traversal : The vulnerability affects Marvell QConvergeConsole in the decryptFile method, where insufficient validation of a user-supplied path allows a remote attacker (no authentication required) to perform arbitrary file writes on ...
Marvell QConvergeConsole 路径遍历漏洞
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the saveNICParamsToFile method. An attacker could exploit the vulnerability to write a file in the SYSTEM...
CVE-2025-49070
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File Inclusion.This issue affects Elessi: from n/a through 6.4.1...
