573 matches found
CVE-2025-9826
The vulnerability CVE-2025-9826 affects M-Files Hubshare versions before 25.8, where a stored cross-site scripting flaw can allow authenticated users to execute scripts in other users’ contexts. Publicly disclosed details in multiple feeds confirm the affected product (M-Files Hubshare), the issu...
CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users...
M-Files Hubshare 安全漏洞
M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents, and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 25.8, which stems from stored cross-site scripting and could lead to script execution by...
M-Files 25.6.14925.0 Path Traversal
This repository contains a proof-of-concept exploit in C for a suspected path traversal vulnerability in M‑Files version 25.6.14925.0. It attempts to read sensitive files e.g. /etc/passwd by injecting traversal payloads into REST API endpoints...
CVE-2025-2091
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...
CVE-2025-5964
A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server...
Exploit for CVE-2025-5964
CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: By...
CVE-2025-2091
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...
CVE-2025-2091
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...
CVE-2025-2091 Open redirection in M-Files Mobile
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...
CVE-2025-2091
CVE-2025-2091 describes an open redirect in M-Files mobile applications for Android and iOS before version 25.6.0. The underlying issue allows attackers to craft PDF files that trigger requests to untrusted URLs, potentially deceiving users into visiting harmful sites. Affected software: M-Files ...
CVE-2025-2091 Open redirection in M-Files Mobile
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...
M-Files 安全漏洞
M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files versions prior to 25.6.0 that stems from vulnerability to an open redirection attack, which could cause users to access untrusted URLs...
PT-2025-25531 · M Files · My Files
Name of the Vulnerable Software and Affected Versions: M-Files mobile applications for Android and iOS versions prior to 25.6.0 Description: An open redirection issue allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs. This can be...
The vulnerability of the M-Files Server platform’s interface allows a perpetrator to read arbitrary files.
The vulnerability of the M-Files Server platform’s automation interface is related to incorrect restrictions on the path name to the restricted catalog during the processing of the final point. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...
CVE-2025-5964
A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server...
CVE-2025-5964
A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server...
CVE-2025-5964
CVE-2025-5964 affects M‑Files Server pre-25.6.14925.0, where a path traversal flaw in the API endpoint lets an authenticated user read server files. Public sources describe the vulnerable component as the API handling file access, with the root cause being traversal in requests to REST endpoints....