2132 matches found
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation Automatically exploit systems with vulnerable davfs2 CVE-2013-4362 WHAT IS THIS FOR? Just two .sh scripts to simplify the exploitation davfs2 with vulnerable versions Prerequisites At least one of the module 'fuse' or 'coda' must not be load...
CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept
CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 Simulation ⚠️ Educational Purposes Only This project demonstrates a proof-of-concept exploiting WebDAV and .url file delivery to achieve realistic remote code execution. It includes a decoy-based executable and a controlled simulation of...
CVE-2026-57490
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...
CVE-2026-104107
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. Wi...
CVE-2026-104107 FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. Wi...
CVE-2026-104107
The web-based file manager FileRise is vulnerable to a path traversal flaw in version 3.22.0 . The /api/file/saveFile.php operation improperly handles dot and dot-dot segments in user-controlled folder inputs before performing ACL inheritance checks. An authenticated non-administrator with a vali...
CVE-2026-104107 FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. Wi...
CVE-2026-57490 FileRise: WebDAV authentication bypasses TOTP/MFA entirely
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...
CVE-2026-57490
Prior to version 3.16.0 , the self-hosted file manager FileRise is vulnerable to an authentication bypass when WebDAV is enabled. The root cause lies in the public/webdav.php authentication callback, which validates only the username and password via AuthModel::authenticate() while failing to enf...
CVE-2026-57490 FileRise: WebDAV authentication bypasses TOTP/MFA entirely
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...
CVE-2026-96846
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...
CVE-2026-96843
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-96847
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-88136
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...
CVE-2026-88137
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network...
CVE-2026-88135
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-88126
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-87714
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...