PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-34508: Another File Sharing Application, Another Path Traversal

horizon3.ai | vulnerability | CVE-2025-34508 | #vulnerability-research | #path-traversal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Learn how Horizon3 uncovered CVE-2025-34508 in ZendTo, allowing attackers to access sensitive files through a path traversal flaw.
CVE
CVE-2025-34508
Published
Collected

Related coverage

vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · horizon3.ai
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.
vulnerability · horizon3.ai
[CVE-2026-105133] AhsayCBS Deep-Dive: Auth Bypass to RCE
Technical analysis of CVE-2026-105133 and CVE-2026-105134 in AhsayCBS, revealing how authentication bypass and path traversal enable remote code execution.
vulnerability · horizon3.ai
Traccar 5 Remote Code Execution Vulnerabilities
Exploiting critical path traversal vulnerabilities CVE-2024-31214 and CVE-2024-24809 in Traccar for remote code execution
vulnerability · horizon3.ai
CVE-2023-39143: PaperCut Path Traversal/File Upload RCE Vulnerability
# CVE-2023-39143: PaperCut Path Traversal/File Upload RCE Vulnerability Naveen Sunkavally August 4, 2023 Attack Blogs, Disclosures ## Summary CVE-2023-39143 is a critical vulnerability we...
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
Back