CVE-2025-11913

A path traversal vulnerability exists in Shenzhen Ruiming Technology Streamax Crocus version 1.3.40 . The flaw is located in the Download function of the /Service.do?Action=Download endpoint, where improper handling of the Path argument allows for remote exploitation. While the exploit has been d...

UBUNTU-CVE-2018-12475

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-downloadfiles of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects:...

PT-2020-8527

Name of the Vulnerable Software and Affected Versions: openSUSE Open Build Service affected versions not specified Description: A vulnerability in the obs-service-download files component of openSUSE Open Build Service allows authenticated users to generate HTTP requests against internal networks...

CVE-2019-8982

com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...

DEBIAN-CVE-2006-2875

Stack-based buffer overflow in the CLParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svcdownload command with compressed data that triggers the overflow during expansion...