Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.
MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
CVE-2025-15237 is an Absolute Path Traversal vulnerability in the QOCA aim AI Medical Cloud Platform by Quanta Computer. It allows authenticated remote attackers to read folder names under arbitrary paths by exploiting improper input validation. The vulnerability requires low attack complexity and no user interaction but does require authentication with low privileges. The CVSS 4.0 score is 5.3, indicating medium severity. No known exploits are currently reported in the wild. This flaw could expose sensitive directory structure information, potentially aiding further attacks. European healthcare organizations using this platform could be at risk, especially those with deployments of QOCA aim. Mitigation involves implementing strict input validation and access controls on file path parameters.
CVE-2025-15236 is an Absolute Path Traversal vulnerability in the QOCA aim AI Medical Cloud Platform by Quanta Computer. It allows authenticated remote attackers to read folder names under arbitrary specified paths. The vulnerability requires low attack complexity and no user interaction but does require authentication with low privileges. The CVSS 4.0 base score is 5.3, indicating medium severity. No known exploits are currently reported in the wild. This flaw could expose sensitive directory structure information, potentially aiding further attacks. European healthcare organizations using this platform could be impacted, especially those with deployments of QOCA aim. Mitigation involves strict input validation, access control enforcement, and monitoring for suspicious file path access.
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
CVE-2025-14848 is an absolute directory traversal vulnerability in Advantech WebAccess/SCADA version 9.2.1. This flaw allows an attacker with low privileges to determine the existence of arbitrary files on the system without requiring user interaction. The vulnerability impacts confidentiality but does not affect integrity or availability. Exploitation is possible remotely over the network with low attack complexity. No known exploits are currently reported in the wild. The vulnerability is rated medium severity with a CVSS score of 4.3. European organizations using this SCADA platform should prioritize patching or mitigating this issue to prevent potential reconnaissance by attackers.
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability. Attackers can copy arbitrary files on the user's system and paste them into any path, which poses a potential risk of information leakage or could consume hard drive space by copying files in large volumes.
TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system.
The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the save_fields() function in all versions up to, and including, 16.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
The LWS Cleaner plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'lws_cl_delete_file' function in all versions up to, and including, 2.4.1.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to view the contents of files outside of the originally intended directory.
The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.