208 matches found
CVE-2026-26993 Flare has XSS vulnerability in Raw File Preview
Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG or other active content formats such as HTML...
CVE-2026-26993 Flare has XSS vulnerability in Raw File Preview
Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG or other active content formats such as HTML...
CVE-2026-26993 Flare has XSS vulnerability in Raw File Preview
Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG or other active content formats such as HTML...
CVE-2026-2560
A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the function run of the file plugins/fileThumb/lib/VideoResize.class.php of the component Media File Preview Plugin. Such manipulation of the argument localFile leads to os command injection. The attack can ...
CVE-2026-2560 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection
A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the function run of the file plugins/fileThumb/lib/VideoResize.class.php of the component Media File Preview Plugin. Such manipulation of the argument localFile leads to os command injection. The attack can ...
CVE-2026-2560 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection
A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the function run of the file plugins/fileThumb/lib/VideoResize.class.php of the component Media File Preview Plugin. Such manipulation of the argument localFile leads to os command injection. The attack can ...
kodbox 操作系统命令注入漏洞
Kodbox is a network file manager developed by Warlee’s individual developer. Versions of Kodbox 1.64.05 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from an improper handling of the localFile parameter in the run function of the Media...
SUSE CVE-2016-11063
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview...
GO-2025-4045 Mattermost Server vulnerable to Cross-site Scripting through file preview feature in github.com/mattermost/mattermost-server
Mattermost Server vulnerable to Cross-site Scripting through file preview feature in github.com/mattermost/mattermost-server...
EUVD-2016-2052
Malware in sbrugna...
EUVD-2020-5599
Malware in sbrugna...
EUVD-2025-20174
Malicious code in bioql PyPI...
EUVD-2022-0961
Malicious code in bioql PyPI...
EUVD-2022-4263
Malicious code in bioql PyPI...
EUVD-2022-2583
Malicious code in bioql PyPI...
EUVD-2025-20173
Malicious code in bioql PyPI...
EUVD-2025-20170
Malicious code in bioql PyPI...
EUVD-2024-40271
Malicious code in bioql PyPI...