PT-2025-50629

Name of the Vulnerable Software and Affected Versions baowzh hfly versions prior to 638ff9abe9078bc977c132b37acbe1900b63491c Description A security issue exists in baowzh hfly that allows for path traversal. This occurs due to manipulation of the filename argument in the...

CVE-2025-14521: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The affected element is an unknown function of the file /admin/index.php/datafile/download. Such manipulation of the argument filename leads to path traversal. The attack may be performed fro...

PT-2025-50614

A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The...

PT-2025-50630

Name of the Vulnerable Software and Affected Versions baowzh hfly affected versions not specified Description A flaw exists that allows for unrestricted file uploads. The issue is located in an unknown function within the /Public/Kindeditor/php/upload json.php file. Manipulation of the imgFile...