CVE-2025-20269

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerabili...

CVE-2025-25185

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

PT-2025-9508

Name of the Vulnerable Software and Affected Versions GPT Academic versions 3.91 and earlier Description The issue arises from the improper handling of soft links in GPT Academic. An attacker can exploit this by creating a malicious soft link file, packaging it into a tar.gz file, and uploading i...

Frauscher Sensortechnik GmbH FDS001 路径遍历漏洞

Frauscher Sensortechnik GmbH FDS001 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik GmbH FDS001 version 1.3.3 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

PT-2021-19640

Name of the Vulnerable Software and Affected Versions: Webware Webdesktop version 5.1.15 Description: The issue allows an attacker to read all files from the server due to a Server-Side Request Forgery SSRF in the document conversion component. Recommendations: For Webware Webdesktop version...

CVE-2021-3204: Server-Side Request Forgery (SSRF)

SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server...