CVE-2021-32161

CVE-2021-32161 is an XSS vulnerability in Webmin 1.973 via the File Manager feature. It stems from insufficient input sanitization of user-supplied parameters in the File Manager, enabling attacker-controlled JavaScript in the user’s browser. Affected: Webmin (version 1.973) and its File Manager....

CVE-2021-32162: Cross-Site Request Forgery (CSRF)

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32161: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

PT-2022-10070

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists in the File Manager feature. Recommendations For Webmin version 1.973, consider disabling the File Manager feature until a patch is available. Restrict access to the File...

PT-2022-10071

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-site request forgery CSRF vulnerability exists in the File Manager feature. This issue allows for malicious requests to be made on behalf of the user, potentially leading to unauthorized actions...

PT-2022-3016

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to insufficient input validation in the file manager, which could allow an attacker to execute arbitrary code. Exploitation requires user interaction, where a victim mus...

PT-2022-2945

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to insufficient input validation in the file manager, which can lead to arbitrary code execution in the context of the current user. Exploitation requires user...

PT-2022-2942

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions prior to 12.0.1 Description The issue is related to insufficient input validation in the file manager, which can allow an attacker to execute arbitrary code by opening a malicious file. Exploitation requires user...

PT-2022-2993

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability in the file manager, which could allow an attacker to disclose sensitive memory information. This vulnerability can be exploited b...

WordPress Library File Manager plugin跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...

Studio 42 elFinder 代码问题漏洞

Studio 42 elFinder is an open source web file manager that uses jQuery and jQuery UI and is written in JavaScript. A security vulnerability exists in Studio 42 elFinder 2.0.4 that allows remote malicious users to upload arbitrary files and execute PHP code...

The vulnerability of the File Manager in Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit

Roxy File Manager version 1.4.5 proof of concept exploit for a PHP file upload restriction bypass vulnerability. Exploit Title: Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit Author: Adam Shebani NULLHE4D Software: Roxy File Manager Version: 1.4.5 CVE: CVE-2018-20525 Vendor...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which can be exploited by an authenticated attacker to execute arbitrary code and elevate privileges via the HTTP interface...

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...