CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

XiongMai UC-HTTPd Path Traversal

Module exploits UC-HTTPd Path Traversal vulnerability in multiple XiongMai cameras. If target is vulnerable it is possible to list directories and read files from the file system. !/usr/bin/env python3 -- coding: utf-8 -- """XiongMai UC-HTTPd Path Traversal""" import re from kittysploit import fr...

Vtiger CRM v7.2.0 - Directory Listing Detection

Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Vtiger CRM v7."""...

phpShowtime 2.0 - Directory Traversal Detection

A directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in phpShowtime 2.""" import re from...

CVE-2025-13879: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

EUVD-2000-0236

Malware in sbrugna...

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs version 9.6, which stems from vulnerability to absolute path traversal attacks and can be exploited to read any file and list arbitrary directories on...

PT-2023-28660 · WordPress · Mmm Simple File List

Name of the Vulnerable Software and Affected Versions: Mmm Simple File List WordPress plugin versions prior to 2.3 Description: The issue allows any authenticated users, such as subscribers, to list the content of arbitrary directories due to a lack of validation in the generated path...

CVE-2022-25358: Improper Limitation of a Pathname to a Restricted Directory

A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories not read files. This occurs because the safe-path? Scheme predicate is not used for directories...

PT-2022-17237

Name of the Vulnerable Software and Affected Versions awful-salmonella-tar versions prior to 0.0.4 Description A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar. Attackers can only list directories, not read files. This occurs because the safe-path? Scheme...

Eyoucms Directory Traversal (CVE-2021-39500)

A directory traversal vulnerability exists in Eyoucms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Information disclosure

Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...

uWSGI PHP Plugin Directory Traversal (CVE-2018-7490)

A directory traversal vulnerability exists in Debian debian linux 8.0. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Argus Surveillance DVR Directory Traversal (CVE-2018-15745)

A directory traversal vulnerability exists in Argus Surveillance DVR. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Siemens SiNVR 3 Central Control Server (CCS) Directory Traversal Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. Siemens SiNVR 3 Central Control Server CCS has a directory traversal vulnerability in its xml-based communication protocol. An...

CVE-2019-18924: Improper Limitation of a Pathname to a Restricted Directory

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ and variations, it is possible to list all the directories and check if a particular file exists...

Pulse Connect Secure File Disclosure (CVE-2019-11510)

A file disclosure vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

PT-2019-17651

Name of the Vulnerable Software and Affected Versions serve versions prior to 7.0.1 Description A bug in handling the ignore files and directories feature in serve allows an attacker to read a file or list the directory that the victim has not allowed access to. This issue is related to Path...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2017-14527

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DTD,...