Lucene search
+L

1997 matches found

AlpineLinux
AlpineLinux
•added 2025/08/02 12:15 a.m.•19 views

CVE-2025-54386

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../...

9.8CVSS8.3AI score0.01105EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/08/01 11:32 p.m.•4 views

CVE-2025-54386 Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../...

7.3CVSS8.2AI score0.01105EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/08/01 6:08 p.m.•20 views

Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution

Summary A path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../ sequences, an attacker can overwrite arbitrary files on the system outside of the intended plugin directory. This ca...

9.8CVSS7.9AI score0.01105EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2025/08/01 6:08 p.m.•7 views

GHSA-Q6GG-9F92-R9WG Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution

Summary A path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../ sequences, an attacker can overwrite arbitrary files on the system outside of the intended plugin directory. This ca...

7.3CVSS7.8AI score0.01105EPSS
SaveExploits0References8
NVD
NVD
•added 2025/07/31 8:15 a.m.•21 views

CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user...

6.5CVSS0.00379EPSS
SaveExploits0References2
OSV
OSV
•added 2025/07/31 8:15 a.m.•12 views

CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user...

6.5CVSS5.7AI score0.00379EPSS
SaveExploits0References2
CVE
CVE
•added 2025/07/31 7:24 a.m.•34 views

CVE-2025-41396

PowerCMS (Alfasado PowerCMS) is affected by CVE-2025-41396 due to a path traversal vulnerability in the file-upload feature. The root cause allows a product user to overwrite arbitrary files on the system. Affected versions are multiple PowerCMS releases; impact is arbitrary file overwrite, with ...

6.5CVSS6.6AI score0.00379EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•10 views

Alfasado PowerCMS 路径遍历漏洞

Alfasado PowerCMS is a content management system CMS from Alfasado Japan. A path traversal vulnerability exists in Alfasado PowerCMS, which stems from a path traversal in the file upload function that could lead to overwriting arbitrary files...

6.5CVSS7.1AI score0.00379EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/07/31 12:00 a.m.•8 views

NUUO NVRmini2 <= 3.11.x Unrestricted Upload RCE

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handleimportuser.php authentication. When combined with another flaw CVE-2011-5325, it is possible to overwrite arbitrary files under...

10CVSS7.4AI score0.48497EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2025/07/30 12:00 a.m.•6 views

RockyLinux 8 : socat (RLSA-2025:11042)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:11042 advisory. socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 Tenable has extracted the preceding description block directly from the RockyLinux...

7.1AI score0.00795EPSS
SaveExploits0References3
OSV
OSV
•added 2025/07/29 1:38 p.m.•14 views

RLSA-2025:11042 Moderate: socat security update

The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets. Security Fixes: socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 F...

5.3CVSS7.3AI score0.00795EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/24 12:23 a.m.•14 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

5CVSS6.9AI score0.00806EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/22 8:15 p.m.•16 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

5CVSS0.00806EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/07/22 4:44 p.m.•4 views

Directory Traversal

Overview onnx is an Open Neural Network Exchange Affected versions of this package are vulnerable to Directory Traversal via the saveexternaldata function. An attacker can overwrite arbitrary files by supplying crafted values to the externaldata.location parameter containing traversal sequences,...

8.8CVSS7.6AI score0.00602EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•0 views

CVE-2025-51480: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in onnx.externaldatahelper.saveexternaldata in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted externaldata.location paths containing traversal sequences, bypassing intended directory restrictions...

8.8CVSS6AI score0.00602EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/22 12:00 a.m.•43 views

CVE-2025-51475

TransformerOptimus SuperAGI version 0.0.14 is vulnerable to an Arbitrary File Overwrite (AFO) in the superagi.controllers.resources.upload component. Remote attackers can overwrite arbitrary files by submitting unsanitised filenames to the file upload endpoint. The root cause is the improper hand...

7AI score0.00806EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/07/22 12:00 a.m.•27 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

0.00806EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•10 views

PT-2025-30455 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: TransformerOptimus SuperAGI version 0.0.14 Description: An arbitrary file overwrite issue exists in the superagi.controllers.resources.upload component. This allows remote attackers to overwrite arbitrary files by submitting unsanitized...

5CVSS6.7AI score0.00806EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/22 12:00 a.m.•8 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

7.5AI score0.00806EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•0 views

CVE-2025-51475: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

5CVSS5.9AI score0.00806EPSS
SaveExploits1References1
Rows per page
Query Builder