Ruijie Networks Switch eWeb S29_RGOS 11.4 - Local File Inclusion Detection

Ruijie Networks Switch eWeb S29RGOS 11.4 is vulnerable to local file inclusion and allows remote unauthenticated attackers to access locally stored files and retrieve their content via the 'download.do' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie Networks Switch eWeb S29RGOS...

CVE-2020-37015: Improper Limitation of a Pathname to a Restricted Directory

The Ruijie Networks Switch eWeb S29RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve...

CVE-2025-11336: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

CVE-2025-11018: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch...