Lucene search
+L

555 matches found

Cvelist
Cvelist
•added 2025/07/14 10:15 a.m.•32 views

CVE-2025-7618 A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM

A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...

4.8CVSS0.00332EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/14 10:15 a.m.•40 views

CVE-2025-7618

CVE-2025-7618 describes a stored Cross-Site Scripting (XSS) vulnerability in the ADM File Explorer and Text Editor. Affected products and versions include: ADM 4.1.0–4.3.3.RH61 and ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier. The vulnerability allows injected scripts to pot...

4.8CVSS5.6AI score0.00332EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/14 10:15 a.m.•13 views

CVE-2025-7618 A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM

A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...

4.8CVSS5.6AI score0.00332EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•11 views

CVE-2025-7618: Improper Neutralization of Input During Web Page Generation

A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...

4.8CVSS5.6AI score0.00332EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2025/06/13 12:00 a.m.•269 views

Windows File Explorer Windows 10 Pro x64 - TAR Extraction

import os import tarfile def main: filename = input"Enter your file name: " ipaddress = input"Enter IP EX: 192.168.1.162: " librarycontent = f""" \\ipaddress\IT """ libraryfilename = f"filename.library-ms" with openlibraryfilename, "w", encoding="utf-8" as f: f.writelibrarycontent tarname =...

6.5CVSS7.4AI score0.23331EPSS
SaveExploits23
GithubExploit
GithubExploit
•added 2025/05/27 1:20 p.m.•573 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability...

6.5CVSS7.5AI score0.23331EPSS
SaveExploits23
RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•26 views

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

7.3CVSS6.8AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•20 views

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

8.8CVSS7.9AI score0.00309EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:29 a.m.•18 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.5AI score0.0057EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:13 a.m.•40 views

CVE-2019-8345

The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...

4.3CVSS5.3AI score0.00385EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 2:11 a.m.•21 views

CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function...

4.3CVSS6AI score0.00968EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•27 views

PT-2025-17846 · Undefined · Undefined

We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...

8.8CVSS7.6AI score0.79628EPSS
SaveExploits39References1
Microsoft KB
Microsoft KB
•added 2025/04/22 12:00 a.m.•12 views

April 22, 2025—KB5055629 (OS Builds 22621.5262 and 22631.5262) Preview

April 22, 2025—KB5055629 OS Builds 22621.5262 and 22631.5262 Preview Applies To Windows 11 Enterprise and Education, version 22H2 Windows 11 version 23H2, all editions For information about Windows update terminology, see types of Windows updates and the monthly quality update types. To find an...

6.1AI score
SaveExploits0
NVD
NVD
•added 2025/04/16 1:15 p.m.•34 views

CVE-2025-1983

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS0.00664EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/04/16 12:36 p.m.•42 views

CVE-2025-1983 Stored Cross-Site Scripting in Ready_

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS0.00664EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/16 12:36 p.m.•78 views

CVE-2025-1983

CVE-2025-1983 describes an XSS in Ready_’s File Explorer upload: an attacker can inject JavaScript via the filename. The injected content is stored server-side and executes whenever a user interacts with the uploaded file. Connected sources (NVD and Red Hat CVEs) confirm the same description, ide...

5.1CVSS5.8AI score0.00664EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/16 12:36 p.m.•17 views

CVE-2025-1983 Stored Cross-Site Scripting in Ready_

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS5.8AI score0.01099EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•6 views

CVE-2025-1983: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...

5.1CVSS5.8AI score0.00664EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•5 views

PT-2025-16594

Name of the Vulnerable Software and Affected Versions Ready File Explorer affected versions not specified Description A cross-site scripting XSS issue in the upload functionality of Ready File Explorer allows the injection of arbitrary JavaScript code in the filename. The injected content is stor...

5.1CVSS5.7AI score0.00664EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Symfonia Ready_ Cross-site Scripting Vulnerability

Symfonia Ready is an operating system from Symfonia that builds programs for companies to use off-the-shelf modules and business applications. A cross-site scripting vulnerability exists in Symfonia Ready, which stems from insufficient input cleanup in the File Explorer upload function and could...

9.4CVSS5.6AI score0.01099EPSS
SaveExploits0References3
Rows per page
Query Builder