INNORIX WP 安全漏洞

INNORIX WP is a high-capacity file transfer software from the Korean company INNORIX. A security vulnerability exists in INNORIX WP that stems from improper path restriction and lack of authorization, which could lead to path traversal...

The vulnerability in the web interface for managing IP-telephony systems FreePBX allows a perpetrator to execute arbitrary code.

The vulnerability in the FreePBX IP-telephony system management web interface is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the management server software in G Data Management Server lies in the incorrect limitation of the path to the restricted access directory. This allows attackers to increase their privileges and gain access to modify any arbitrary files.

The vulnerability of the management server software from G Data Management Server is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to modify any files using a specially...

The vulnerability of the mPDF library, related to incorrect restrictions on path names to the catalog, allows attackers to gain unauthorized access to protected information.

The vulnerability of the mPDF library is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the SAPCAR file compression and decompression utility lies in the improper limitation of the path name for the restricted access directory, allowing attackers to write arbitrary files.

The vulnerability of the SAPCAR file compression and decompression utility is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to write arbitrary files...

WordPress plugin Filr 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

The vulnerability of the ZenCount visitor counter lies in the incorrect limitation of the path name to the restricted access catalog, allowing a violator to compromise the confidentiality of the protected information.

The vulnerability of the ZenCount visitor counter is related to an incorrect limitation on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

PT-2025-51549

Уязвимость плагина Redpen - Pipeline Reporter for Jira сервера автоматизации Jenkins связана с неправильным ограничением пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

The vulnerability of the out_file plugin of the Fluent Bit log collection and processing tool allows a malicious actor to write any file outside of the target directory.

The vulnerability of the outfile plugin of the Fluent Bit logging and processing tool is related to an incorrect restriction on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to write any file outside of the target directory...

The vulnerability of the Common.getHomeDir() function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Common.getHomeDir function in the multi-platform web solution for creating Scada systems in Scada-LTS is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attac...

PT-2025-55089

Уязвимость платформы для управления бизнес-процессами Comindware Platform связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

CVE-2025-40549

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain rea...

CVE-2025-40549

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

CVE-2025-40549 SolarWinds Serv-U Path Restriction Bypass Vulnerability

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

CVE-2025-40549 SolarWinds Serv-U Path Restriction Bypass Vulnerability

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

EUVD-2025-197928

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

CVE-2025-40549

SolarWinds Serv-U is affected by a Path Restriction Bypass vulnerability (CVE-2025-40549). Reports in multiple sources indicate that an attacker with administrative privileges could bypass directory restrictions and execute code on a directory, effectively enabling remote code execution. The issu...

CVE-2025-40549: Improper Limitation of a Pathname to a Restricted Directory

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

ROS-20251113-08

A vulnerability in the Docker Compose multi-container application management tool is related to an incorrect restriction of the path name to a restricted directory. Exploitation of the vulnerability could allow an attacker acting remotely to overwrite an arbitrary file...