PT-2026-45006

NB: All tags and branches in this repository are past their end of life, so the vulnerability will not be fixed. The advisory is posted on the request of the researcher, for the information of anyone who might still use this software. Impact There is a security vulnerability in eZ Publish Legacy,...

VulnCheck KEV: CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

KUNBUS Revolution Pi 路径遍历漏洞

KUNBUS Revolution Pi is an open, modular and cost-effective Raspberry Pi based industrial PC from KUNBUS. A path traversal vulnerability exists in the KUNBUS Revolution Pi, which stems from the dir parameter of the /pictory/php/getFileList.php page containing a path traversal vulnerability...

CVE-2024-57451

ChestnutCMS =1.5.0 has a directory traversal vulnerability in contentcore.controller.FileControllergetFileList, which allows attackers to view any directory...

CVE-2024-57451: Improper Limitation of a Pathname to a Restricted Directory

ChestnutCMS =1.5.0 has a directory traversal vulnerability in contentcore.controller.FileControllergetFileList, which allows attackers to view any directory...

PT-2025-3448

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions =1.5.0 Description The issue allows attackers to view any directory due to a directory traversal vulnerability in the contentcore.controller.FileControllergetFileList function. This enables unauthorized access to sensitive...

SUSE CVE-2008-2431

Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control aka ienipp.ocx with 1 a long third argument to the GetDriverFile method; a long first argument to the 2 GetPrinterURLList or 3...

SUSE CVE-2008-2432

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument...

OSV-2021-1316 Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38870 Crash type: Stack-buffer-overflow READ Crash state: Assimp::ZipArchiveIOSystem::Implement::MapArchive Assimp::ZipArchiveIOSystem::getFileList Assimp::D3MF::D3MFOpcPackage::D3MFOpcPackage...

PT-2021-27791

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the involvement of specific functions such as...

PT-2016-1283

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.4 SAP Manufacturing Integration and Intelligence xMII component version 15.0 Description The issue is related to a directory traversal vulnerability in the SAP Manufacturing Integration and Intelligence xMII component...

CVE-2016-2389: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

CVE-2008-2432: Exposure of Sensitive Information to an Unauthorized Actor

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument...

GE Fanuc Real Time Information Portal 2.6 writeFile() API Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================== GE Fanuc Real Time Information Portal 2.6 writeFile API Exploit meta ======================================================================== $Id: hookedonfanucs.rb Th...

Novell iPrint Client ActiveX Control Multiple Vulnerabilities

This host has Novell iPrint Client installed, which is prone to activex control vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelliprintclientactvxmultvuln900040.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Novell iPrint Client ActiveX Control Multiple Vulnerabilities Authors:...