Clustering Local File Inclusion

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...

CVE-2026-76488: Undefined Security Weakness

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

CVE-2025-67171: Improper Limitation of a Pathname to a Restricted Directory

Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal...

EUVD-2021-1371

Malware in sbrugna...

EUVD-2001-0876

Malware in sbrugna...

EUVD-2024-20825

Malicious code in bioql PyPI...

EUVD-2025-13302

Malicious code in bioql PyPI...

EUVD-2022-4986

Malicious code in bioql PyPI...

EUVD-2023-52246

Malicious code in bioql PyPI...

EUVD-2024-1596

Malicious code in bioql PyPI...

EUVD-2024-2388

Malicious code in bioql PyPI...

CVE-2025-34120

An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint index.php/admin/update/sa/backup, allowing attackers to specify arbitrary file paths using...

CVE-2025-34023 Karel IP Phone IP1211 Path Traversal

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted...

CVE-2025-4364

CVE-2025-4364 affects Assured Telematics Fleet Management System (IoT fleet solution). The connected documents describe an unauthenticated access vulnerability that could disclose system information and enable access to administrative credentials. The primary sources (CISA ICS advisory ICSA-25-14...

PT-2025-2086

Name of the Vulnerable Software and Affected Versions Opigno TinCan Question Type versions 7.X-1.0 through 7.X-1.2 Description The issue is related to improper neutralization of directives in statically saved code, also known as 'Static Code Injection', which allows PHP Local File Inclusion. This...

Exploit for Path Traversal in Ghost

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a...

CVE-2023-6343

Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The...

CVE-2022-4244 Codehaus-plexus: directory traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

CVE-2022-44311

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

Directory Traversal Vulnerability in M18G of Shenzhen Meike Star Communication Technology Co.

The M18G is a wireless router. A directory traversal vulnerability exists in the M18G of Shenzhen Meike Star Communication Technology Co. An attacker can exploit the vulnerability to access arbitrary directories on the file system and read sensitive files...