CVE-2025-40629

creationtimestamp| type| source ---|---|--- 2025-05-16 13:35:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16687 2025-05-16 17:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcizn6iij2p 2025-11-20 03:00:06+00:00| published-proof-of-concept|...

CVE-2025-40629

PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory...

CVE-2025-40629 Path Traversal vulnerability in PNETLab

PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory...

CVE-2025-40629

CVE-2025-40629 affects PNETLab 4.2.10. The issue is a directory traversal vulnerability caused by improper input sanitization in the file access mechanism, enabling an attacker to manipulate HTTP request paths to access sensitive files outside the intended directory. Multiple connected sources co...