WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal Detection

A directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversal Detection

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1."...

EUVD-2024-43118

Malicious code in bioql PyPI...

CVE-2024-48824

An issue in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component...

CVE-2024-48824

A security vulnerability exists in Automatic Systems Maintenance SlimLane (specifically version 29565_d74ecce0c1081d50546db573a499941b10799fb7) that allows a remote attacker to obtain sensitive information . The flaw is caused by an information disclosure issue within the download-file.php compon...

CVE-2024-48824: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component...

CVE-2014-5187: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php...

PT-2014-6326

Name of the Vulnerable Software and Affected Versions tom-m8te plugin version 1.5.3 Description The issue allows remote attackers to read arbitrary files. This is achieved via the file parameter to the "tom-download-file.php" endpoint. Recommendations For tom-m8te plugin version 1.5.3, consider...

CVE-2013-7240

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...

CVE-2013-7240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...

PT-2014-3299

Name of the Vulnerable Software and Affected Versions Advanced Dewplayer plugin version 1.2 for WordPress Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the dew file parameter in the download-file.php file. Recommendations For Advanced Dewplayer plugin...