Lucene search
+L

6 matches found

NVD
NVD
•added 2026/04/07 5:16 p.m.•28 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

7.5CVSS0.00389EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/07 4:29 p.m.•9 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

5.3CVSS5.9AI score0.00389EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2026/04/07 12:00 a.m.•25 views

File Browser 安全漏洞

File Browser is an open-source file management interface developed by File Browser. It allows for the uploading, deletion, previewing, and editing of files within a specified directory. Versions of File Browser prior to 2.63.1 contained security vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS5.8AI score0.00389EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•31 views

PT-2026-30907

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.1 Description File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. The resourceGetHandler function in http/resource.go...

7.5CVSS8.4AI score0.00389EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/07/08 12:00 a.m.•26 views

The vulnerability of the API interface of the database of Cisco Expressway Series and Cisco Telepresence VCS devices allows attackers to perform attacks by bypassing the absolute path on the vulnerable device and rewriting files in the basic operating system with root privileges.

The vulnerability of the API interface of Cisco Expressway Series and Cisco Telepresence VCS database devices is related to insufficient checking of arguments entered by users during command execution. Exploiting this vulnerability allows attackers to perform attacks remotely, bypassing the...

9CVSS7AI score0.01933EPSS
SaveExploits0References2Affected Software2
zdt
zdt
•added 2008/11/07 12:00 a.m.•51 views

U&M Software Signup 1.1 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================= U&M Software Signup 1.1 Auth Bypass Vulnerability ================================================= ============================================================================== U&M Softwa...

7.1AI score
SaveExploits0
Rows per page
Query Builder