CVE-2025-34031

Summary: CVE-2025-34031 affects Moodle LMS Jmol Plugin, version 6.1 and earlier. The vulnerability is a local/file path traversal in the jsmol.php endpoint: user input is passed directly to file_get_contents(), enabling reading arbitrary files from the server when the parameter is crafted. No aut...

PT-2025-26658 · Moodle · Moodle Lms Jmol Plugin

Name of the Vulnerable Software and Affected Versions: Moodle LMS Jmol plugin versions 6.1 and prior Description: A path traversal vulnerability exists in the Moodle LMS Jmol plugin via the query parameter in jsmol.php. The script directly passes user input to the file get contents function witho...

CVE-2025-52936

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

CVE-2025-52936

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

UBUNTU-CVE-2025-52936

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

CVE-2025-52936 Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

CVE-2025-52936

CVE-2025-52936 affects the sslh package (yrutschle sslh) prior to 2.2.2. Debian’s DLA-4238-1 and related advisories disclose a link-following vulnerability and fix it in Debian 11 bullseye with package version 1.20-1+deb11u1 . The vulnerability is described as an “Improp­er Link Resolution Before...

CVE-2025-47293

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity XXE attack and to a server-side request forgery SSRF attack. This allows an attacker to elevate their...

Path Traversal

DotVVM is vulnerable to Path Traversal. The vulnerability is due to insufficient input validation allowing the attacker to access the arbitrary files when a FileResourceLocation is used and the application is running in Debug mode...

Path Traversal

pythona2a is vulnerable to Path traversal. The vulnerability is due to improper validation or sanitization of user-supplied file paths in the createworkflow function, allows an attacker to access arbitrary files on the server by crafting malicious input that traverses directories...

sslh 后置链接漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A backlink vulnerability exists in versions prior to sslh 2.2.2, which stems from improper link resolution before file access...

CVE-2025-48026

The CVE-2025-48026 entry applies to Mitel OpenScape Xpressions WebApl component (through V7R1 FR5 HF43 P913). It describes an unauthenticated path traversal due to insufficient input validation, allowing reading of arbitrary files on the underlying OS and exposure of sensitive information. Affect...

Exploit for PHP Remote File Inclusion in Wpplugins Hide_My_Wp_Ghost

CVE-2025-26909 Vulnerability Scanner A Python-based scanner a...

PT-2025-26551 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the code-projects School Fees Payment System, affecting an unknown part of the file /fees.php. The manipulation of the transcation remark...

CVE-2025-6218

CVE-2025-6218 affects WinRAR and enables directory traversal during archive extraction, allowing code execution in the user context. Public PoCs and exploits (GitHub) demonstrate placing payloads into sensitive locations (e.g., Startup folder) to achieve RCE. Affected versions are WinRAR ≤ 7.11; ...

PT-2025-26510 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue was found in the PHPGurukul Art Gallery Management System. The problem is related to an unknown function in the file /admin/edit-art-medium-detail.php, where t...

PT-2025-26513 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/changepropic.php. The manipulation of the imageid argument leads to SQL...

PT-2025-26507 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. It is...

PT-2025-26518 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue has been found in the PHPGurukul Art Gallery Management System. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulatio...

CVE-2025-34023 Karel IP Phone IP1211 Path Traversal

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted...