Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

Shirne CMS 1.2.0 - Local File Inclusion

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. id: CVE-2022-37299 info: name: Shirne CMS 1.2.0 - Local File Inclusion author: pikpikcu severity: medium description: Shirne CMS 1.2.0 is vulnerable to local file...

WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

T24 Web Server - Local File Inclusion

T24 web server is vulnerable to unauthenticated local file inclusion that permits an attacker to exfiltrate data directly from server. id: CVE-2019-14251 info: name: T24 Web Server - Local File Inclusion author: 0xAkoko severity: high description: T24 web server is vulnerable to unauthenticated...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

FlatnuX CMS - Directory Traversal

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. id: CVE-2012-4878 info: name: FlatnuX CMS - Directory Traversal author: daffainfo severity:...

VertaAI ModelDB - Path Traversal

The endpoint "/api/v1/artifact/getArtifact?artifactpath=" is vulnerable to path traversal. The main cause of this vulnerability is due to the lack of validation and sanitization of the artifactpath parameter. id: CVE-2023-6023 info: name: VertaAI ModelDB - Path Traversal author:...

ionCube Tester Plus <= 1.3 - Local File Inclusion

The ionCube Tester Plus plugin for WordPress versions = 1.3 is vulnerable to unauthenticated arbitrary file read via path traversal. The 'ininame' parameter in loader-wizard.php is not properly sanitized, allowing attackers to read sensitive files such as wp-config.php and /etc/passwd without...

FHEM 6.0 - Local File Inclusion

FHEM version 6.0 suffers from a local file inclusion vulnerability. id: CVE-2020-19360 info: name: FHEM 6.0 - Local File Inclusion author: 0xAkoko severity: high description: FHEM version 6.0 suffers from a local file inclusion vulnerability. impact: | Successful exploitation of this vulnerabilit...

LimeSurvey 4.1.11 - Local File Inclusion

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...

Pallets Werkzeug <0.15.5 - Local File Inclusion

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion ist eine schnelle Entwicklungsplattform für die Entwicklung und Bereitstellung von Web- und Mobilanwendungen. CVE-2024-20767 – ColdFusion-Versionen 2023.6, 2021.12 und früher sind von einer Schwachstelle in der Zugriffskontrolle Improper Access...

CVE-2024-46987

CVE-2024-46987: Path Traversal Automatizzato 📖 Panoramica Questo repository contiene un Proof of Concept PoC basato su Python per CVE-2024-46987. Questa vulnerabilità è un difetto di Path Traversal trovato nei moduli di download di file di alcuni ambienti CMS in particolare Camaleon CMS Versione...

gitrob

Gitrob: Integrare l'Open Source nell'OSINT Gitrob è uno strumento per aiutare a trovare file potenzialmente sensibili caricati su repository pubblici su GitHub. Gitrob clona i repository appartenenti a un utente o a un'organizzazione fino a una profondità configurabile e scorre la cronologia dei...

CVE-2024-24919

Exploit per CVE-2024-24919 Descrizione Questo script Python è un exploit per CVE-2024-24919, una CVE che ha colpito i prodotti Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versioni: R77.20 EOL, R77.30 EOL, R80.10...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei-Vorlage Diese Vorlage wurde für das Nuclei -Tool geschrieben, um die Schwachstelle CVE-2025-25231 sekundäre Path Traversal im Produkt Omnissa Workspace ONE UEM zu erkennen. Beschreibung der Schwachstelle CVE-2025-25231 ist eine Path-Traversal-Schwachstelle, die es einem...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - Controllo degli accessi errato - Elenco delle directory Descrizione : Una vulnerabilità di elenco delle directory in Best Student Management System v1.0 consente agli aggressori di elencare le directory e i file sensibili all'interno...

CVE-2023-49545

CVE-2023-49545 Customer Support System 1.0 - Elenco delle directory Descrizione : una vulnerabilità di elenco delle directory in Customer Support System v1 consente agli attaccanti di elencare directory e file sensibili all'interno dell'applicazione senza richiedere autenticazione/autorizzazione...