Lucene search
+L

542 matches found

Exploit DB
Exploit DB
•added 2025/06/13 12:00 a.m.•262 views

Windows File Explorer Windows 10 Pro x64 - TAR Extraction

import os import tarfile def main: filename = input"Enter your file name: " ipaddress = input"Enter IP EX: 192.168.1.162: " librarycontent = f""" \\ipaddress\IT """ libraryfilename = f"filename.library-ms" with openlibraryfilename, "w", encoding="utf-8" as f: f.writelibrarycontent tarname =...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23
GithubExploit
GithubExploit
•added 2025/05/27 1:20 p.m.•566 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability...

6.5CVSS7.3AI score0.23331EPSS
SaveExploits23
RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•21 views

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

7.3CVSS6.7AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•16 views

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

8.8CVSS6.8AI score0.00309EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:29 a.m.•14 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS6.2AI score0.0057EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:13 a.m.•35 views

CVE-2019-8345

The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...

4.3CVSS6.4AI score0.00385EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 2:11 a.m.•18 views

CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function...

4.3CVSS7.1AI score0.01054EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•22 views

PT-2025-17846 · Undefined · Undefined

We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...

8.8CVSS7.3AI score0.79249EPSS
SaveExploits39References1
Microsoft KB
Microsoft KB
•added 2025/04/22 12:00 a.m.•10 views

April 22, 2025—KB5055629 (OS Builds 22621.5262 and 22631.5262) Preview

None None...

6.1AI score
SaveExploits0
NVD
NVD
•added 2025/04/16 1:15 p.m.•28 views

CVE-2025-1983

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS0.00653EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/04/16 12:36 p.m.•38 views

CVE-2025-1983 Stored Cross-Site Scripting in Ready_

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS0.00653EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/16 12:36 p.m.•13 views

CVE-2025-1983 Stored Cross-Site Scripting in Ready_

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS6.1AI score0.00653EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/16 12:36 p.m.•74 views

CVE-2025-1983

CVE-2025-1983 describes an XSS in Ready_’s File Explorer upload: an attacker can inject JavaScript via the filename. The injected content is stored server-side and executes whenever a user interacts with the uploaded file. Connected sources (NVD and Red Hat CVEs) confirm the same description, ide...

5.1CVSS5.7AI score0.00653EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

Symfonia Ready_ 跨站脚本漏洞

Symfonia Ready is an operating system from Symfonia that builds programs for companies to use off-the-shelf modules and business applications. A cross-site scripting vulnerability exists in Symfonia Ready, which stems from insufficient input cleanup in the File Explorer upload function and could...

9.4CVSS5.8AI score0.0108EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•1 views

CVE-2025-1983: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS5.7AI score0.00653EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/04/03 12:00 a.m.•8 views

VulnCheck KEV: CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveIn wildExploits23References11
Information Security Automation
Information Security Automation
•added 2025/03/19 5:04 p.m.•36 views

About Spoofing – Windows File Explorer (CVE-2025-24071) vulnerability

About Spoofing - Windows File Explorer CVE-2025-24071 vulnerability. The vulnerability is from the March Microsoft Patch Tuesday. The VM vendors didn't highlight it in their reviews. A week later, on March 18, researcher 0x6rss published a write-up and a PoC exploit. According to him, the...

6.5CVSS7.1AI score0.23331EPSS
SaveExploits23
BDU FSTEC
BDU FSTEC
•added 2025/03/17 12:00 a.m.•9 views

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to disclose protected information

The vulnerability of the Windows File Explorer in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

7.8CVSS7.4AI score0.23331EPSS
SaveExploits23References4
RedhatCVE
RedhatCVE
•added 2025/03/13 7:19 p.m.•29 views

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23References3
OSV
OSV
•added 2025/03/11 5:16 p.m.•10 views

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23References3
Rows per page
Query Builder