CVE-2006-3392

Es una herramienta simple para explotar Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure . vulnerabilidades Cómo usar: 1-Ejecuta el script python exploit.py . 2-Introduce el puerto . 3-Selecciona la carpeta que quieras ver . ⛔ Importante ⛔ No nos hacemos responsables del uso de este scrip...

CVE-2026-72847

broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...

CVE-2026-72847

broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...

PT-2026-69367

Name of the Vulnerable Software and Affected Versions File Manager versions prior to 6.9.1 Description An issue exists where a capability check is missing on the bitapps fm connector endpoint. This allows any authenticated user, including those with subscriber-level privileges, to browse the enti...

CVE-2026-7325

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects :...

CVE-2026-7325

Devolutions Server is affected by an improper authorization vulnerability in its Active Directory browsing feature. This flaw allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account by performing an authentication relay to...

CVE-2026-7325: Server-Side Request Forgery (SSRF)

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects :...

EUVD-2000-0870

Malware in sbrugna...

EUVD-2001-0200

Malware in sbrugna...

EUVD-2002-0463

Malware in sbrugna...

EUVD-2004-0335

Malware in sbrugna...

EUVD-2011-4364

Malware in sbrugna...

EUVD-2019-2268

Malware in sbrugna...

EUVD-2005-0337

Malware in sbrugna...

EUVD-2006-2212

Malware in sbrugna...

EUVD-2022-0366

Malicious code in bioql PyPI...

EUVD-2023-38875

Malicious code in bioql PyPI...

Files SQL注入漏洞

Files is a single-file PHP application from the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A SQL injection vulnerability exists in Files 0.16.9 and prior versions, which stems from a failure to block...

Files 跨站脚本漏洞

Files is a single-file PHP application by the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A cross-site scripting vulnerability exists in Files versions 1.0 through 1.5.0, which stems from vulnerability to...

CVE-2019-10265

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the directory in the JavaScript code. If changed to for example "C:" then one can browse the whole server...