Quectel EG25-G Module
The Quectel EG25-G is a cellular module that was found to have a TFTP daemon vulnerability, allowing arbitrary file reads via a…
Tag: File Read
Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files via Org-Mode Markup
A critical vulnerability in Gitea, the self-hosted Git platform, allows unauthenticated attackers to read arbitrary files accessible to the service account. Tracked…
CVE-2026-29059: Windmill Path Traversal Vulnerability
A high-severity unauthenticated path traversal flaw in Windmill's get_log_file endpoint allows arbitrary file read. Exploitation can expose SUPERADMIN_SECRET leading to RCE. Patched…
CVE-2026-10816: Citrix NetScaler Unauthenticated Arbitrary File Read Vulnerability
An external control of file name vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary file read when management access is…
CVE-2026-41950: Authorization Bypass in Dify File Read Within Tenant
An authorization bypass vulnerability (CVSS 6.5) in Dify that allows authenticated users to read the full contents of files uploaded by other…