Lucene search
+L

3833 matches found

OSV
OSV
•added 2025/12/04 12:00 a.m.•17 views

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

9.1CVSS6.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/04 12:00 a.m.•38 views

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

0.00954EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/04 12:00 a.m.•36 views

CVE-2025-65346

The alexusmai laravel-file-manager software (versions v3.3.1 and below ) is vulnerable to a Directory Traversal flaw within its unzip/extraction functionality . Due to insufficient validation of extraction paths, an attacker can craft a ZIP archive containing traversal sequences (e.g., ../../rout...

5.9AI score0.00954EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/04 12:00 a.m.•5 views

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

6.6AI score0.00954EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/04 12:00 a.m.•12 views

EUVD-2025-201169

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

6.5AI score0.00954EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•2 views

CVE-2025-65346: Improper Limitation of a Pathname to a Restricted Directory

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

9.1CVSS5.9AI score0.00954EPSS
SaveExploits1References1
GitLab Advisory Database
GitLab Advisory Database
•added 2025/12/04 12:00 a.m.•19 views

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

7AI score0.00954EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/12/03 9:31 p.m.•17 views

GHSA-RR44-8J7R-JG2Q alexusmai laravel-file-manager is vulnerable to Directory Traversal

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.3CVSS6.9AI score0.00552EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2025/12/03 9:31 p.m.•16 views

alexusmai laravel-file-manager is vulnerable to Directory Traversal

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

7AI score0.00552EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2025/12/03 8:16 p.m.•17 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS0.00552EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•2 views

CVE-2025-65345: Improper Limitation of a Pathname to a Restricted Directory

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS5.8AI score0.00552EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/03 12:00 a.m.•17 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS6.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•4 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.6AI score0.00552EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•37 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

0.00552EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•19 views

Laravel File Manager 安全漏洞

Laravel File Manager is a Laravel file manager by Aleksandr Manekin Personal Developer. A security vulnerability exists in Laravel File Manager 3.3.1 and earlier versions, which stems from a directory traversal in the zip archive feature that could lead to arbitrary file manipulation...

6.5CVSS6.5AI score0.00552EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
•added 2025/12/03 12:00 a.m.•22 views

alexusmai laravel-file-manager is vulnerable to Directory Traversal

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

5.9AI score0.00552EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/03 12:00 a.m.•12 views

PT-2025-48994

Name of the Vulnerable Software and Affected Versions alexusmai laravel-file-manager versions 3.3.1 and below Description The laravel-file-manager software contains a flaw related to directory traversal. The zip/archiving functionality does not properly validate paths, allowing an attacker to...

6.5CVSS6.4AI score0.00552EPSS
SaveExploits1References10
CVE
CVE
•added 2025/12/03 12:00 a.m.•49 views

CVE-2025-65345

The laravel-file-manager project (versions v3.3.1 and below ) is vulnerable to an authenticated Directory Traversal flaw within its zip/archiving functionality . Due to improper path validation, an attacker with access to the file manager interface can manipulate the ZIP request payload to includ...

5.8AI score0.00552EPSS
SaveExploits1References2Affected Software1
GithubExploit
GithubExploit
•added 2025/12/01 9:58 a.m.•205 views

Exploit for CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Functio...

6.9AI score0.00552EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/27 12:00 a.m.•0 views

CVE-2025-12971: Incorrect Authorization

The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'wcpchangepostfolder' function in all versions up to, and including, 3.1.5. This make...

4.3CVSS5.9AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder