14407 matches found
WordPress plugin Media Library Assistant 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Media...
EUVD-2025-34890
A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
CVE-2025-62353
Windsurf IDE is affected by a path traversal vulnerability affecting all versions. The issue allows a threat actor to read and write arbitrary local files on an end user’s system, inside and outside of the current project scope. The path traversal can be exploited directly or via indirect prompt ...
CVE-2025-62353
A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
VulnCheck KEV: CVE-2023-39143
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled a very common configuration...
📄 Ilevia EVE X1 Server 4.7.18.0.eden Parameter Traversal / Arbitrary File Access
An unauthenticated absolute and relative path traversal vulnerability exists in the smart home/building automation platform via the /ajax/php/getfilecontent.php endpoint of Ilevia EVE X1 Server versions 4.7.18.0.eden and below. By supplying a crafted file POST parameter, a remote attacker can rea...
CVE-2025-59281
Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
EUVD-2025-34427
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability...
CVE-2025-54755
CVE-2025-54755 : A directory traversal vulnerability in BIG-IP Configuration utility (TMUI) allows a highly privileged authenticated attacker to access files beyond the intended directories. Affected products include BIG-IP TMUI/Configuration utility (BIG-IP Next branches listed); impact is uncon...
CVE-2024-13991
Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the fullPath parameter of the /fileDownload?action=downloadBackupFile endpoint and retrieve files from the server filesystem. VulnCheck has observed...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from a directory traversal vulnerability that could allow an authenticated attacker to...
The vulnerability of the 7-Zip file archiver lies in the improper handling of symbolic links before accessing a file, allowing an attacker to execute arbitrary code.
The vulnerability of the 7-Zip file archiver is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted ZIP archive...
CVE-2025-62363
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
EUVD-2025-34366
Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
EUVD-2025-34277
Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
EUVD-2025-34265
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gain elevated privileges by exploiting the way the system resolves links, potentially accessing or modifying files with higher permissions...
CVE-2025-59281
Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
