Lucene search
+L

55472 matches found

Nuclei
Nuclei
added 2026/09/11 5:22 a.m.63 views

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

4CVSS5.5AI score0.00668EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.142 views

HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion

An Unauthenticated Path Traversal vulnerability exists in the /public/loaderphp file The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server. id: CVE-2024-34470 info: name: HSC...

8.6CVSS8AI score0.06699EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.57 views

WebMvc.fn/WebFlux.fn - Path Traversal

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

7.5CVSS6.9AI score0.14718EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.224 views

Chuanhu Chat - Directory Traversal

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

9.8CVSS7.3AI score0.28336EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.58 views

Belkin N150 Router 1.00.08/1.00.09 - Path Traversal

A path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. id: CVE-2014-2962 info: name: Belkin N150 Router 1.00.08/1.00.09 - Path Traversa...

7.8CVSS6AI score0.47095EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.3 views

HSC MailInspector - Local File Inclusion

HSC MailInspector v5.3.3-7 contains a path traversal caused by improper control of user-supplied file paths in /vendor/phpunit/phpunit.php, letting remote attackers read arbitrary files, exploit requires crafted request. id: CVE-2026-29962 info: name: HSC MailInspector - Local File Inclusion...

7.5CVSS0.00372EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.33 views

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

6.5CVSS5.9AI score0.01352EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.14 views

Audiobookshelf - Authentication Bypass

Audiobookshelf contains a path traversal caused by improper authentication-exemption check on URL-encoded paths in server/routers/Auth.js, letting unauthenticated attackers read arbitrary files, exploit requires crafted URL with encoded traversal sequences. id: CVE-2026-71209 info: name:...

7.5CVSS5.9AI score0.02005EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.296 views

MobSF - Path Traversal

MobSF is vulnerable to an issue with apktool CVE-2024-21633 that allows for RCE or arbitrary file writing. It does this through a path traversal vulnerability. This template tests for it by writing to a local file and reading that file. RCE can be achieved by overwriting jadx, as shown in the two...

7.8CVSS7.3AI score0.01331EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.195 views

EasySpider 0.6.2 - Arbitrary File Read

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...

8.8CVSS5.7AI score0.03305EPSS
SaveExploits1References6
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.50 views

NocoDB version <= 0.106.1 - Arbitrary File Read

NocoDB through 0.106.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, includi...

7.5CVSS7.3AI score0.08875EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.27 views

WordPress Backup Migration <= 1.3.6 - Path Traversal

WordPress Backup Migration plugin versions up to 1.3.6 contain a path traversal and file validation issue in handledownloading function, letting unauthenticated attackers download backup files containing sensitive information. id: CVE-2023-6266 info: name: WordPress Backup Migration = 1.3.6 - Pat...

7.5CVSS7.3AI score0.02055EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.64 views

LOLLMS WebUI - Absolute Path Traversal

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

7.5CVSS7.3AI score0.01941EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.103 views

Mlflow <2.2.1 - Local File Inclusion

Mlflow before 2.2.1 is susceptible to local file inclusion due to path traversal ..\filename in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id:...

9.8CVSS8.1AI score0.6968EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.30 views

Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read

An arbitrary file read vulnerability, also known as a "path traversal" or "directory traversal" vulnerability, occurs when an attacker is able to access files on a system that they shouldn't have access to. This vulnerability arises from improper input validation or insufficient access controls i...

8.7CVSS8AI score0.02111EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.64 views

WordPress OrderConvo < 14 - Path Traversal

WooCommerce OrderConvo WordPress plugin \u003C 14 contains a path traversal vulnerability caused by improper validation of file download paths, letting unauthenticated attackers read or download arbitrary files remotely id: CVE-2025-10162 info: name: WordPress OrderConvo 14 - Path Traversal autho...

7.5CVSS5.9AI score0.03891EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.148 views

GitLab 16.0.0 - Path Traversal

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups id: CVE-2023-2825 info: name:...

10CVSS7.6AI score0.71641EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.3 views

WGDashboard < 4.3.2 - Unauthenticated File Read

WGDashboard 4.3.2 contains a path traversal vulnerability caused by improper access control, letting unauthorized attackers access the host file system without authentication. id: CVE-2026-44343 info: name: WGDashboard 4.3.2 - Unauthenticated File Read author: str4k3r severity: critical...

9.8CVSS0.01548EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.30 views

MLflow <= 3.9.0 - Arbitrary File Read

mlflow mlflow = 3.9.0 contains a path traversal caused by bypassing source path validation via the mlflow.prompt.isprompt tag in CreateModelVersion request, letting unauthenticated remote attackers read arbitrary files. id: CVE-2026-2614 info: name: MLflow = 3.9.0 - Arbitrary File Read author:...

7.5CVSS7.5AI score0.03608EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.21 views

OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read

OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...

9.3CVSS6AI score0.01899EPSS
SaveExploits0References4
Rows per page
Query Builder