Exploit for Path Traversal in Ghost

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email...

CVE-2024-44195

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15.1, which originates from an application that may be able to read arbitrary files...

PT-2025-20068

Name of the Vulnerable Software and Affected Versions SysAid On-Prem versions 23.3.40 and earlier Description SysAid On-Prem is affected by an unauthenticated XML External Entity XXE issue in the Checkin processing functionality. This allows for administrator account takeover and file read...

PT-2024-38779 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper parsing issue in the FileZ client could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading. This issue might permit...

The vulnerability of the TeamViewer Patch & Asset Management software component, which is used for remote control of TeamViewer computers, allows a hacker to perform the deletion of arbitrary files.

The vulnerability of the TeamViewer Patch & Asset Management software component, which is used for remote control of TeamViewer computers, is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow an attacker to perform the deletion of...

CVE-2024-10590

The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the adminupload function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker exploiting the vulnerability can overwrite arbitrary files...

PT-2024-9461 · Teamviewer · Teamviewer Patch & Asset Management

Name of the Vulnerable Software and Affected Versions: TeamViewer Patch & Asset Management versions prior to 24.12 Description: The issue is related to insufficient permissions in the TeamViewer Patch & Asset Management component, which allows a local authenticated user to delete arbitrary files...

PT-2024-36378 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.2 Description: A logic issue was addressed with improved file handling. This issue allows a malicious app to access arbitrary files. The problem is fixed in macOS Sequoia 15.2. Recommendations: For versions...

PT-2025-3044 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 watchOS versions prior to 11.2 visionOS versions prior to 2.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to the Password Autofill component in the mentioned operatin...

CVE-2024-10708 System Dashboard < 2.8.15 - Admin+ Path Traversal

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server...

Ivanti Patch SDK 安全漏洞

Ivanti Patch SDK is a security tool development kit provided by Ivanti to help organizations automate system vulnerability remediation and patch management. Ivanti Patch SDK suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this...

Digi ConnectPort 安全漏洞

Digi ConnectPort is a server from Digital Networks Malaysia Digi Inc. It provides wireless communication. A security vulnerability exists in Digi ConnectPort versions prior to 1.4.12 that stems from allowing file path manipulation via POST requests, which can result in the upload of arbitrary fil...

CVE-2024-11010 FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.1.4 via the 'defaultlang' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, ...

VulnCheck KEV: CVE-2024-45388

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

CVE-2024-11952

The Classic Addons – WPBakery Page Builder plugin for WordPress is vulnerable to Limited Local PHP File Inclusion in all versions up to, and including, 3.0 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions grant...

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...