Monthly
Directory listing exposure in CONTEC CONPROSYS PAC Series enables unauthenticated network attackers to enumerate internal directory structures by requesting a specific URL on the device's embedded web server. Affected models include the Integrated Type CPS-PC341 and Configurable Type CPS-PCS341, both deployed in industrial automation environments. No public exploit has been identified at time of analysis, and no CISA KEV listing exists; impact is limited to information disclosure that could assist subsequent reconnaissance against the device.
Directory listing exposure in Contec's CONPROSYS M2M Gateway and M2M Controller Series allows a remote attacker to enumerate server-side directory structures by accessing a specific URL on the device's web interface. The affected hardware includes both integrated and configurable variants of the CPS-MG341, CPS-MGS341, CPS-MC341, and CPS-MCS341 product lines. Exposed directory listings reveal file and path structures that can facilitate reconnaissance for follow-on attacks against these industrial gateway devices. No public exploit or active exploitation has been identified at time of analysis.
Directory listing exposure in SourceCodester Best Employee Management System 1.0 allows unauthenticated remote attackers to browse the /assets/uploadImage/Profile/ path and enumerate all uploaded employee profile images without any credentials. The web server returns a browsable file index rather than denying access, leaking filenames, file metadata, and potentially PII-adjacent content tied to employee records. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, though exploitation requires nothing more than a standard HTTP GET request.
Arbitrary filesystem directory listing in Lyrion Music Server 9.2.0 exposes any host directory to remote unauthenticated attackers via the readdirectory query, which accepts an unsandboxed folder parameter with no path restriction. Both the CLI service on TCP port 9090 and the HTTP JSON-RPC endpoint at /jsonrpc.js are affected, presenting a dual-protocol attack surface that requires no credentials in the default configuration. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the trivial attack complexity - a single unauthenticated network request - significantly lowers the real-world barrier to abuse.
Information disclosure in Dell PowerFlex Manager (Appliance, Rack, and core Manager) versions 4.6.2 and earlier allows unauthenticated remote attackers to enumerate server contents through exposed directory listings. The flaw carries a CVSS 7.5 (high) rating driven entirely by confidentiality impact and requires no privileges or user interaction, though no public exploit identified at time of analysis and the issue is not on CISA KEV.
Vvveb before 1.0.8.3 allows unauthenticated remote attackers to enumerate sensitive files and directories through directory listing information disclosure. Multiple directories including admin, plugins, themes, and media folders lack proper index directives in .htaccess files, permitting attackers to view filenames, file sizes, modification timestamps, and unrendered admin templates that expose sensitive route maps. No active exploitation has been confirmed, but the vulnerability is trivial to exploit with network access and no authentication.
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system. [CVSS 5.3 MEDIUM]
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication. [CVSS 7.5 HIGH]
A vulnerability was determined in SourceCodester Farm Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Directory listing exposure in IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 lets unauthenticated remote users browse and enumerate the application's file and folder names by requesting certain application URLs, because the deployment serves a directory index rather than blocking the request. Only names are disclosed - file contents cannot be read, obtained, or modified - so the practical impact is reconnaissance that may aid follow-on targeting rather than direct data theft, and the assessed CVSS 3.1 score is 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). There is no public exploit identified at time of analysis and no CISA KEV listing; EPSS is low at 0.31% (21st percentile), making this a low-to-moderate priority issue to remediate on a routine hardening cycle, prioritizing any instance that is internet-facing.
Directory listing exposure in CONTEC CONPROSYS PAC Series enables unauthenticated network attackers to enumerate internal directory structures by requesting a specific URL on the device's embedded web server. Affected models include the Integrated Type CPS-PC341 and Configurable Type CPS-PCS341, both deployed in industrial automation environments. No public exploit has been identified at time of analysis, and no CISA KEV listing exists; impact is limited to information disclosure that could assist subsequent reconnaissance against the device.
Directory listing exposure in Contec's CONPROSYS M2M Gateway and M2M Controller Series allows a remote attacker to enumerate server-side directory structures by accessing a specific URL on the device's web interface. The affected hardware includes both integrated and configurable variants of the CPS-MG341, CPS-MGS341, CPS-MC341, and CPS-MCS341 product lines. Exposed directory listings reveal file and path structures that can facilitate reconnaissance for follow-on attacks against these industrial gateway devices. No public exploit or active exploitation has been identified at time of analysis.
Directory listing exposure in SourceCodester Best Employee Management System 1.0 allows unauthenticated remote attackers to browse the /assets/uploadImage/Profile/ path and enumerate all uploaded employee profile images without any credentials. The web server returns a browsable file index rather than denying access, leaking filenames, file metadata, and potentially PII-adjacent content tied to employee records. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, though exploitation requires nothing more than a standard HTTP GET request.
Arbitrary filesystem directory listing in Lyrion Music Server 9.2.0 exposes any host directory to remote unauthenticated attackers via the readdirectory query, which accepts an unsandboxed folder parameter with no path restriction. Both the CLI service on TCP port 9090 and the HTTP JSON-RPC endpoint at /jsonrpc.js are affected, presenting a dual-protocol attack surface that requires no credentials in the default configuration. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the trivial attack complexity - a single unauthenticated network request - significantly lowers the real-world barrier to abuse.
Information disclosure in Dell PowerFlex Manager (Appliance, Rack, and core Manager) versions 4.6.2 and earlier allows unauthenticated remote attackers to enumerate server contents through exposed directory listings. The flaw carries a CVSS 7.5 (high) rating driven entirely by confidentiality impact and requires no privileges or user interaction, though no public exploit identified at time of analysis and the issue is not on CISA KEV.
Vvveb before 1.0.8.3 allows unauthenticated remote attackers to enumerate sensitive files and directories through directory listing information disclosure. Multiple directories including admin, plugins, themes, and media folders lack proper index directives in .htaccess files, permitting attackers to view filenames, file sizes, modification timestamps, and unrendered admin templates that expose sensitive route maps. No active exploitation has been confirmed, but the vulnerability is trivial to exploit with network access and no authentication.
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system. [CVSS 5.3 MEDIUM]
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication. [CVSS 7.5 HIGH]
A vulnerability was determined in SourceCodester Farm Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Directory listing exposure in IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 lets unauthenticated remote users browse and enumerate the application's file and folder names by requesting certain application URLs, because the deployment serves a directory index rather than blocking the request. Only names are disclosed - file contents cannot be read, obtained, or modified - so the practical impact is reconnaissance that may aid follow-on targeting rather than direct data theft, and the assessed CVSS 3.1 score is 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). There is no public exploit identified at time of analysis and no CISA KEV listing; EPSS is low at 0.31% (21st percentile), making this a low-to-moderate priority issue to remediate on a routine hardening cycle, prioritizing any instance that is internet-facing.