Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Bridge Uncontrolled Recursion

The vulnerability of the Adobe Bridge file manager is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

wordpress-auto-upload-shell

██╗ ██╗██████╗ ███████╗██╗██╗ ███████╗███╗ ██...

WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Chamseddine Bouzaiene in WordPress Plugin Frontend File Manager versions = 23.6...

[SECURITY] Fedora 45 Update: caja-1.28.0-13.fc45

Caja mate-file-manager is the file manager and graphical shell for the MATE desktop, that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote file systems, preview files and launch applications associated with them. It is also...

Exploit for CVE-2026-100520

CVE-2026-100520 — Path Traversal → RCE in Laranode File Manage...

CVE-2026-64950

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64949

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2026-64947

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards...

EUVD-2026-90599

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64950 Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64950 Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64950

The Pandora FMS application, from version 777 onwards , is vulnerable to stored Cross-Site Scripting (XSS) due to missing input validation and output encoding on the directory name parameter within the File Manager's Create Directory function. This flaw allows for the execution of malicious scrip...

CVE-2026-64949 Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

EUVD-2026-90598

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2026-64949

Pandora FMS versions 777 onwards are susceptible to a vulnerability in the File Manager module caused by an incomplete extension blacklist . This flaw allows authenticated users to upload and execute arbitrary .phar files , potentially leading to unauthorized code execution. No specific remediati...

CVE-2026-64949 Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2026-64947 CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...