MAL-2026-14561 Malicious code in module-relpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bf564e2647cb828bb130eaaba71b21fb6d78928cb6e3a74165bbb2fc546b98 The package presents itself as relative-import-path README title, homepage and repository URL point at github.com/marko-js/relative-import-path, and...

Malicious Package

Overview module-relpath is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in module-relpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bf564e2647cb828bb130eaaba71b21fb6d78928cb6e3a74165bbb2fc546b98 The package presents itself as relative-import-path README title, homepage and repository URL point at github.com/marko-js/relative-import-path, and...

WebFileSys 2.31.0 - Directory Path Traversal

Exploit Title: WebFileSys 2.31.0 - Directory Path Traversal in relPath Parameter Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee Vendor Homepage: http://www.webfilesys.de/webfilesys-home/index.html Software Link:...

WebFileSys 2.31.0 Directory Traversal Vulnerability

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

WebFileSys 安全漏洞

WebFileSys is a Web-based multi-user file manager written in Java from WebFileSys, Inc. A security vulnerability exists in WebFileSys version 2.31.0, which stems from a problem with the relPath parameter that allows an attacker to perform directory traversal via a crafted HTTP request...

WebFileSys 2.31.0 Directory Traversal

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

PT-2025-5881 · Unknown · Webfilesys

Name of the Vulnerable Software and Affected Versions: WebFileSys version 2.31.0 Description: An issue in the relPath parameter allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the relPath parameter, attackers can manipulate file pat...

CVE-2024-53586: Improper Limitation of a Pathname to a Restricted Directory

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

PT-2024-40875

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash occurs in the validate relpath function, which is called by load module meta and f...

dit.cms 1.3 - 'path/sitemap/relPath' Local File Inclusion

dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable code is everywhere - PoC's...

CVE-2007-2262: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the 1 relPath and 2 folder parameters. NOTE: this product was originally reported as "File117"...