CVE-2006-3392

It is a simple tool to exploit Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure . vulnerabilities How to use: 1-Run the script python exploit.py . 2-put the port . 3-Select the folder you want to view . ⛔ Important ⛔ We are not responsible for the use of this script in an unethical act...

CVE-2026-72847

broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...

CVE-2026-72847

broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...

CVE-2026-7325

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects :...

CVE-2026-7325

Devolutions Server is affected by an improper authorization vulnerability in its Active Directory browsing feature. This flaw allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account by performing an authentication relay to...

CVE-2026-7325: Server-Side Request Forgery (SSRF)

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects :...

EUVD-2002-0463

Malware in sbrugna...

EUVD-2019-2268

Malware in sbrugna...

EUVD-2004-0335

Malware in sbrugna...

EUVD-2005-0337

Malware in sbrugna...

EUVD-2011-4364

Malware in sbrugna...

EUVD-2001-0200

Malware in sbrugna...

EUVD-2006-2212

Malware in sbrugna...

EUVD-2000-0870

Malware in sbrugna...

EUVD-2022-0366

Malicious code in bioql PyPI...

EUVD-2023-38875

Malicious code in bioql PyPI...

Files SQL注入漏洞

Files is a single-file PHP application from the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A SQL injection vulnerability exists in Files 0.16.9 and prior versions, which stems from a failure to block...

Files 跨站脚本漏洞

Files is a single-file PHP application by the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A cross-site scripting vulnerability exists in Files versions 1.0 through 1.5.0, which stems from vulnerability to...

CVE-2019-10265

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the directory in the JavaScript code. If changed to for example "C:" then one can browse the whole server...

CVE-2022-41905

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...