Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:36:36 +0000 CVE-2018-25311 — VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal https://cve.radiocsirt.org/vuln/cve-2018-25311 <p><strong>Affected:</strong> VideoFlow Ltd. VideoFlow Digital Video Protection</p> <p>VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.</p> <p><strong>Affected:</strong> VideoFlow Ltd. VideoFlow Digital Video Protection</p> <p>VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.</p> https://cve.radiocsirt.org/vuln/cve-2018-25311