CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Exploit for Code Injection in Deskfiler

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Code injection

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 is vulnerable to Remote Code Execution (RCE) due to an Electron Webview flaw. The vulnerability allows an attacker to achieve RCE by forcing the application to access an external link through a Webview, which can then connect to an attacker-controlled server. A practical attack v...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Deskfiler Security Vulnerability

Deskfiler is a desktop file manager. A security vulnerability exists in Deskfiler v1.2.3 that originated from allowing an attacker to execute arbitrary code by uploading a specially crafted plug-in...

CVE-2024-25291: Improper Control of Generation of Code

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

PT-2024-20865

Name of the Vulnerable Software and Affected Versions Deskfiler version 1.2.3 Description The issue allows attackers to execute arbitrary code via uploading a crafted plugin. Recommendations For Deskfiler version 1.2.3, consider disabling the plugin upload feature until a patch is available...