VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jul 20, 2025· Updated Jun 17, 2026

CVE-2025-7896

CVE-2025-7896

Description

A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function download_video/delete_video of the file app/controllers/v1/video.py. The manipulation leads to path traversal. The attack can be launched remotely.

Affected products

3
  • Harry0703/Moneyprinterturbov53 versions
    1.2.0+ 2 more
    • (no CPE)range: 1.2.0
    • (no CPE)range: <=1.2.6
    • cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*range: <=1.2.6

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.