PT-2025-6039

Name of the Vulnerable Software and Affected Versions Revolution Pi version 2022-07-28-revpi-buster Description The issue allows an authenticated attacker to list device directories via the "/pictory/php/getFileList.php" endpoint in the dir parameter. This could potentially be exploited to gain...

CVE-2024-8685: Improper Limitation of a Pathname to a Restricted Directory

Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to list device directories via the ‘/pictory/php/getFileList.php’ endpoint in the ‘dir’ parameter...