Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal

Schneider Electric Pelco VideoXpert Enterprise versions 2.0 and prior contain a directory traversal caused by insufficient input validation, letting unauthorized persons view web server files, exploit requires no authentication. id: CVE-2017-9965 info: name: Schneider Electric Pelco VideoXpert...

System Dashboard < 2.8.15 - Admin+ Path Traversal

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server id: CVE-2024-10708 info: name: System Dashboard 2.8.15 - Admin+ Path...

CVE-2026-129464

The Zr.Admin.NET framework (commits 0ee1ab8 through eb9228a ) is vulnerable to a path traversal vulnerability in the /common/DownloadFile endpoint. This flaw allows any authenticated user to read arbitrary server files by supplying absolute paths or ../ sequences via the path parameter. A practic...

EUVD-2026-125596

NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via the id and locationType parameters of /api/stats/:type. Attackers can close the quoted table-name identifier and use error-based output to read database contents,...

CVE-2026-126951

Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server files by abusing a fallback treating the :id parameter as a datasource key. Attackers can send encoded traversal sequences in the :id of GET /api/user/files/:id/raw to escape the...

EUVD-2026-125178

n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browserupload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration...

CVE-2026-126387

The software n8n (versions before 2.46.1 ) is vulnerable to an arbitrary file read vulnerability. Authenticated members can access sensitive server files, such as instance configurations, by providing absolute paths to the Browser Use browser_upload tool . This occurs because a connected remote b...

CVE-2026-126387 n8n before 2.46.1 Arbitrary File Read via Browser Use browser_upload Tool

n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browserupload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration...

EUVD-2026-125114

Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server files by abusing a fallback treating the :id parameter as a datasource key. Attackers can send encoded traversal sequences in the :id of GET /api/user/files/:id/raw to escape the...

CVE-2026-126951 Zipline through 4.4.0 Authenticated Path Traversal via /api/user/files/:id/raw

Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server files by abusing a fallback treating the :id parameter as a datasource key. Attackers can send encoded traversal sequences in the :id of GET /api/user/files/:id/raw to escape the...

CVE-2026-126951

Zipline through version 4.4.0 is affected by an authenticated path traversal vulnerability in the /api/user/files/:id/raw endpoint. The root cause is a fallback mechanism that incorrectly treats the :id parameter as a datasource key . By sending encoded traversal sequences in the :id parameter, a...

CVE-2026-126951 Zipline through 4.4.0 Authenticated Path Traversal via /api/user/files/:id/raw

Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server files by abusing a fallback treating the :id parameter as a datasource key. Attackers can send encoded traversal sequences in the :id of GET /api/user/files/:id/raw to escape the...

CVE-2026-119758

ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted readdocument method. Attackers can supply loca...

EUVD-2026-118390

ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted readdocument method. Attackers can supply loca...

CVE-2026-119758

The ERPNext OCR app for Frappe/ERPNext (through version 1.1.1 ) is vulnerable to a missing authorization and path traversal vulnerability within the whitelisted read_document method. An authenticated user can provide a fully client-controlled path argument to read arbitrary server files, effectiv...

CVE-2026-119758

ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted readdocument method. Attackers can supply loca...

CVE-2026-119553

Moodle versions 5.3.0 , 5.2.0 through 5.2.4 , 5.1.0 through 5.1.8 , 5.0.0 through 5.0.11 , and through 4.5.15 are vulnerable to a path traversal vulnerability within the Blackboard question import format. This issue allows users with question import or lesson edit rights to upload a crafted zip f...

Progress Software Telerik Document Processing Libraries input validation error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain an input validation error vulnerability. This vulnerability stems from XML external entity references in SVG image processing, potentially allowing unauthenticated attackers to read local server files...

CVE-2026-114106

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke readdocument, which lacks sandbox checks, or safeuserpath-gated tools to leak...

PT-2026-120232

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke read document, which lacks sandbox checks, or safe user path-gated tools to le...