84 matches found
EUVD-2025-12510
Malicious code in bioql PyPI...
The vulnerability of the collaborative working cloud platform for FileZ, related to improper security checks at the client side, allows attackers to escalate their privileges and expose sensitive information.
The vulnerability of the collaborative working cloud platform for FileZ is related to improper security checks at the client side. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...
CVE-2025-6249
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data...
CVE-2025-6249
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data...
CVE-2025-6249
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data...
CVE-2025-6249
CVE-2025-6249 affects the FileZ client application. The connected sources describe an authentication bypass vulnerability that could allow a local attacker with elevated permissions to access application data. The issue targets the FileZ client, with root cause aligned to bypassing authentication...
CVE-2025-6249
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data...
CVE-2025-6249: Client-Side Enforcement of Server-Side Security
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data...
Filez 安全漏洞
Filez is an enterprise-grade file management platform from the Chinese company Filez. A security vulnerability exists in Filez that stems from an authentication bypass vulnerability that could lead to local privileged users accessing application data...
PT-2025-29961 · Filez · Filez
Name of the Vulnerable Software and Affected Versions: FileZ client application affected versions not specified Description: An authentication bypass exists in the FileZ client application. A local attacker with elevated permissions may gain access to application data. Recommendations: At the...
CVE-2025-2068
An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user...
CVE-2025-2069
A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user...
CVE-2025-2070
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user...
CVE-2025-2070
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user...
CVE-2025-2069
A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user...
CVE-2025-2068
An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user...
CVE-2025-2070
CVE-2025-2070 concerns the FileZ client, with an improper XML parsing flaw that could allow arbitrary file reads when a crafted URL is visited by a local user. Affected component: FileZ client (XML parsing path). Impact (as per sources): confidentiality impact High; attack vector Local; privilege...
CVE-2025-2070
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user...