CVE-2025-0225

The CVE-2025-0225 entry concerns Tsinghua Unigroup Electronic Archives System version 3.2.210802(62532). Affected is the file /setting/ClassFy/exampleDownload.html; attacker can manipulate the name argument to perform path traversal (e.g., ../filedir) remotely. Public exploits have been disclosed...

CVE-2025-0227: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. This affects an unknown part of the file /Logs/Annals/downLoad.html. The manipulation of the argument path leads to information disclosure. It is possible to initiate t...

PT-2025-3797

Name of the Vulnerable Software and Affected Versions Tsinghua Unigroup Electronic Archives System version 3.2.21080262532 Description A vulnerability was found in the Tsinghua Unigroup Electronic Archives System, affecting an unknown part of the file /Logs/Annals/downLoad.html. The manipulation ...

CVE-2025-0225: Path Traversal: '/../filedir'

A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. Affected by this vulnerability is an unknown functionality of the file /setting/ClassFy/exampleDownload.html. The manipulation of the argument name leads to path traversal:...

CVE-2025-0226: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. T...

CVE-2019-14866

In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have...