Lucene search
+L

6 matches found

NVD
NVD
•added 2026/04/07 5:16 p.m.•33 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

7.5CVSS0.00339EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/07 4:29 p.m.•12 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

5.3CVSS8.4AI score0.00339EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•34 views

PT-2026-30907

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.1 Description File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. The resourceGetHandler function in http/resource.go...

7.5CVSS8.3AI score0.00339EPSS
SaveExploits1
CNNVD
CNNVD
•added 2026/04/07 12:00 a.m.•35 views

File Browser security vulnerabilities

File Browser is an open-source file management interface developed by File Browser. It allows for the uploading, deletion, previewing, and editing of files within a specified directory. Versions of File Browser prior to 2.63.1 contained security vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS8.4AI score0.00339EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/07/08 12:00 a.m.•35 views

Cisco Expressway Series API Interface Path Bypass Privilege Escalation

The vulnerability of the API interface of Cisco Expressway Series and Cisco Telepresence VCS database devices is related to insufficient checking of arguments entered by users during command execution. Exploiting this vulnerability allows attackers to perform attacks remotely, bypassing the...

9CVSS7AI score0.01933EPSS
SaveExploits0References2Affected Software2
zdt
zdt
•added 2008/11/07 12:00 a.m.•56 views

U&M Software Signup 1.1 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================= U&M Software Signup 1.1 Auth Bypass Vulnerability ================================================= ============================================================================== U&M Softwa...

7.1AI score
SaveExploits0
Rows per page
Query Builder