vm-filesystem

vm-filesystem Firebeam 바이트코드를 사용하여 파일 시스템 상호작용을 수행하고, Havoc 인터페이스 파일 브라우저 상호작용을 위해 Python 함수를 몽키패치monkey-patch합니다. 이를 통해 파일 시스템이 내장되지 않은 상태에서도 원격 파일 시스템과 상호작용할 수 있습니다. 이 저장소는 Firebeam 가상 머신과 클라이언트 자체의 모듈성 용량을 통해 가능한 것을 보여주는 예시이기도 하며, 몽키패치된 함수를 통해 에이전트 콘솔과 사용자 인터페이스 양쪽에서 파일 시스템 상호작용의 대체 방법을 제공합니다...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2026-104810

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2024-6651

CVE-2024-6651 POC XSS - CVE-2024-6651 CVE-2024-6651の脆弱性に対する実用的なPoCです。WordPressのプラグインWP File Upload 4.24.8に影響し、Reflected Cross-Site Scripting XSS を引き起こします。 📌 説明 この脆弱性は、WP File Uploadプラグインの管理パネルにおいて、サニタイズされていないパラメータを介して任意のJavaScriptコードの注入を許容します。 攻撃はFile Browser機能の dir...

CVE-2019-6447

CVE-2019-6447 上記のES File Browserのセキュリティ脆弱性に関する調査により、問題の全容を把握することができます。...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS 명령 인젝션 PoC English version 개요 이 리포지토리는 File Browser버전 2.0.02.33.1에서 발견된 중대한 OS 명령 인젝션 취약점 CVE-2026-35585 의 Proof of ConceptPoC입니다. 이 취약점은 "Custom Command Hooks" 기능에 존재합니다. 셸 실행 시 $FILE이나 $USERNAME 등의 환경 변수가 충분히 샌니타이즈되지 않기 때문에, 파일 업로드 권한이 있는 인증된 사용자는 악의적인 파일명을 이용해 호...

CVE-2026-54088-poc

CVE-2026-54088: 인증 후크의 셸 치환에 의한 명령 인젝션 인증 전 RCE English version 개요 이 리포지토리는 File Browser 버전 = 2.63.5에 존재하는 중대한 OS 명령 인젝션 취약점 CVE-2026-54088 의 Proof of ConceptPoC입니다. 이 취약점은 Hook Authentication 기능에 존재합니다. 관리자가 외부 명령으로 사용자 인증을 수행하도록 File Browser를 설정한 경우, 로그인 시 전송된 username과 password가 이스케이프되지 않은 채...

CVE-2026-90929

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90930

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90928

File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust serv...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930

File Browser through version 2.63.23 is vulnerable to a path rule bypass via symbolic link resolution. The application applies access-control path rules to the requested lexical path but fails to reapply those rules after resolving symbolic links to their actual targets. This allows authenticated...

EUVD-2026-77448

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...