WordPress File Manager Plugin - Remote Code Execution Detection

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress File Manager plugin prior to version 6.""" from kittysploit...

KCFinder - Exposure Detection

Detected publicly accessible KCFinder instances that may have allowed arbitrary file uploads and remote code execution RCE.Exposure of KCFinder could have allowed an attacker to gain unauthorized access to the file manager and upload malicious files. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress Plugin File Manager (wp-file-manager) Backup Disclosure Detection

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fmbackups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken...

Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting Detection

Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Rumpus FTP Web File Manager 8.""" from kittysploit...

Web File Manager Login Panel - Detect

Web File Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web File Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web File Manager Login Panel - Detect...

Kae's File Manager Login Panel - Detect

Kae's File Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager Login Panel -...

Kae's File Manager Admin Login Panel - Detect

Kae's File Manager admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager...

Lazy File Manager Detection

lfm.php file in exposed in Lazy File Manager. !/usr/bin/env python3 -- coding: utf-8 -- """lfm.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lazy File Manager Detection', 'description': 'lfm.php file in exposed in...

Monsta FTP - Detect

Detects Monsta FTP web-based file manager interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Monsta FTP web-based file manager interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monsta FTP -...

Roxy File Manager - Panel Detect

Roxy File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Roxy File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Roxy File Manager - Panel Detect', 'description...

Tiny File Manager Panel - Detect

Tiny File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tiny File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiny File Manager Panel - Detect', 'description...

Tiny File Manager - Unauthorized Access Detection

Unauthenticated Tiny File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated Tiny File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiny File Manag...

Kae's File Manager <=1.4.7 - Cross-Site Scripting Detection

Kae's File Manager through 1.4.7 contains a cross-site scripting vulnerability via a crafted GET request to /kfm/index.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Laravel File Manager - Panel Detect

Laravel File Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel File Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel File Manager - Panel Detect',...

Exploit for CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000https://vulners.com/...

CVE-2026-40000

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

EUVD-2026-49136

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

CVE-2026-40000 Path Traversal Vulnerability in ZTE Blade A75 5G

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

CVE-2026-40000 Path Traversal Vulnerability in ZTE Blade A75 5G

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...

CVE-2026-40000

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths e.g., content://zte.com.cn.filer.fileprovider/rootpath, enabling file access with t...