vm-filesystem

vm-filesystem Firebeam 바이트코드를 사용하여 파일 시스템 상호작용을 수행하고, Havoc 인터페이스 파일 브라우저 상호작용을 위해 Python 함수를 몽키패치monkey-patch합니다. 이를 통해 파일 시스템이 내장되지 않은 상태에서도 원격 파일 시스템과 상호작용할 수 있습니다. 이 저장소는 Firebeam 가상 머신과 클라이언트 자체의 모듈성 용량을 통해 가능한 것을 보여주는 예시이기도 하며, 몽키패치된 함수를 통해 에이전트 콘솔과 사용자 인터페이스 양쪽에서 파일 시스템 상호작용의 대체 방법을 제공합니다...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2019-6447

CVE-2019-6447 上記のES File Browserのセキュリティ脆弱性に関する調査により、問題の全容を把握することができます。...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS 명령 인젝션 PoC English version 개요 이 리포지토리는 File Browser버전 2.0.02.33.1에서 발견된 중대한 OS 명령 인젝션 취약점 CVE-2026-35585 의 Proof of ConceptPoC입니다. 이 취약점은 "Custom Command Hooks" 기능에 존재합니다. 셸 실행 시 $FILE이나 $USERNAME 등의 환경 변수가 충분히 샌니타이즈되지 않기 때문에, 파일 업로드 권한이 있는 인증된 사용자는 악의적인 파일명을 이용해 호...

CVE-2026-54088-poc

CVE-2026-54088: 인증 후크의 셸 치환에 의한 명령 인젝션 인증 전 RCE English version 개요 이 리포지토리는 File Browser 버전 = 2.63.5에 존재하는 중대한 OS 명령 인젝션 취약점 CVE-2026-54088 의 Proof of ConceptPoC입니다. 이 취약점은 Hook Authentication 기능에 존재합니다. 관리자가 외부 명령으로 사용자 인증을 수행하도록 File Browser를 설정한 경우, 로그인 시 전송된 username과 password가 이스케이프되지 않은 채...

CVE-2024-6651

CVE-2024-6651 POC XSS - CVE-2024-6651 针对 CVE-2024-6651 漏洞的可运行 PoC，该漏洞影响 WP File Upload 4.24.8 插件，允许在 WordPress 中执行反射型跨站脚本（XSS）。 📌 描述 该漏洞允许通过 WP File Upload 插件管理面板中一个未经清理的参数注入任意 JavaScript 代码。 攻击通过 File Browser 功能中的 dir 参数发生，允许在已认证用户（通常是管理员）的浏览器中执行 JavaScript。 ⚠️ 仅供教育目的和授权环境使用 。 🧠 漏洞类型 反射型 XSS 🧰 要求...

CVE-2026-90929

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90930

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90928

File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust serv...

EUVD-2026-77448

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930

File Browser through version 2.63.23 is vulnerable to a path rule bypass via symbolic link resolution. The application applies access-control path rules to the requested lexical path but fails to reapply those rules after resolving symbolic links to their actual targets. This allows authenticated...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90929

File Browser versions 2.5.0 through 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint (resourcePostHandler in http/resource.go). Unlike the TUS handler, the direct-upload path does not reject a target that is an existing directory. A POST with ?override=true aimed at a...

EUVD-2026-77447

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90928 File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint

File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust serv...