CVE-2021-29447

WordPress XXE Vulnerability : CVE-2021-29447 एक उपयोगकर्ता जो दुर्भावनापूर्ण WAVE फ़ाइल अपलोड करने की क्षमता रखता है जैसे कोई लेखक, वर्डप्रेस की मीडिया लाइब्रेरी में XML पार्सिंग की एक समस्या का शोषण कर सकता है, जिससे XXE हमले हो सकते हैं और इससे फ़ाइल सिस्टम का खुलासा हो सकता है भेद्य कोड XML...

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

CVE-2026-66489

The Joomla Extension by balbooa.com is impacted by CVE-2026-66489 , which allows for various unauthenticated file system disclosure in the Gridbox component. This vulnerability affects versions

EUVD-2026-50336

Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox 2.20.2...

CVE-2026-66489 Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox 2.20.2...

CVE-2026-66489: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox 2.20.2...

CVE-2026-53422

A flaw was found in Erlang OTP's Secure Shell SSH component, specifically within the SSH File Transfer Protocol SFTP daemon's sshsftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories...

CVE-2025-43024

CVE-2025-43024 relates to HP ThinPro 8.1 SP8 and involves a GUI dialog that allows unauthorized viewing of files on the file system. The root cause is an insufficient access check in the dialog that displays file-system contents, enabling information disclosure. Public details across connected so...

CVE-2025-11371

CVE-2025-11371 is an unauthenticated Local File Inclusion (LFI) exists in Gladinet CentreStack and TrioFox. Connected documents describe an LFI affecting CentreStack/TrioFox via the default installation, enabling reading of server files through the /storage/t.dn endpoint by abusing an unsafely sa...

EUVD-2019-13658

Malware in sbrugna...

EUVD-2023-47488

Malicious code in bioql PyPI...

EUVD-2023-29227

Malicious code in bioql PyPI...

EUVD-2022-45547

Malicious code in bioql PyPI...

CVE-2025-3981

The CVE-2025-3981 entry concerns wowjoy Zhejiang HuZhou Huazhuo Information Technology Co., Ltd. Internet Doctor Workstation System v1.0. The vulnerability is tied to improper authorization in the endpoint /v1/prescription/details/, potentially allowing remote, unauthenticated access to processin...

CVE-2023-43067

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

Input validation

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2022-42477: Improper Input Validation

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2021-33662

Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted...