31 matches found
GHSA-J36P-7W88-G82J Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...
PYSEC-2026-2179
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...
PYSEC-2026-2179
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...
CVE-2026-49119
Gradio
CVE-2026-49119: Improper Limitation of a Pathname to a Restricted Directory
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide...
CVE-2026-29515
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
EUVD-2026-11078
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
CVE-2026-29515
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
CVE-2026-29515 MiCode FileExplorer SwiFTP Server Authentication Bypass
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
CVE-2026-29515
MiCode FileExplorer contains an authentication bypass vulnerability in its embedded SwiFTP FTP server. The PASS command handler unconditionally grants access, allowing network attackers to log in with any username/password and to list, read, write, and delete files exposed by the FTP server. Affe...
CVE-2026-29515 MiCode FileExplorer SwiFTP Server Authentication Bypass
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
dhtmlx FileExplorer 安全漏洞
dhtmlx FileExplorer is a JavaScript file system developed by the dhtmlx company. There is a security vulnerability in dhtmlx FileExplorer, which stems from an authentication bypass in the embedded SwiFTP FTP server component. This vulnerability allows network attackers to log in and perform file...
PT-2026-24573
Name of the Vulnerable Software and Affected Versions MiCode FileExplorer affected versions not specified Description The software contains an authentication bypass in the embedded SwiFTP FTP server component. This allows network attackers to log in without valid credentials by sending arbitrary...
CVE-2026-29515: Incorrect Implementation of Authentication Algorithm
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...
EUVD-2022-5230
Malicious code in bioql PyPI...
CVE-2020-15015
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...
dhtmlx FileExplorer 安全漏洞
dhtmlx FileExplorer is a JavaScript file system from dhtmlx, Inc. A security vulnerability exists in dhtmlx FileExplorer version v.8.4.6, which originated from a local file inclusion vulnerability that allows remote attackers to obtain sensitive information via the file download feature...
dhtmlx FileExplorer 安全漏洞
dhtmlx FileExplorer is a JavaScript file system from dhtmlx, Inc. A security vulnerability exists in dhtmlx FileExplorer version v.8.4.6, which originated from a directory traversal vulnerability that allows remote attackers to obtain sensitive information via the file listing feature...