EUVD-2026-8594

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links...

GHSA-8VRH-3PM2-V4V6 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

CVE-2026-27611

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can completely bypass the password and still download the file. This happens because the API returns a direct download link i...

CVE-2026-27611

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can completely bypass the password and still download the file. This happens because the API returns a direct download link i...

EUVD-2025-19579

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-13239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link...

CVE-2025-52996

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...

CVE-2025-52996

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...

Speedy 1.0 - Remote Shell Upload Vulnerability

No description provided by source. Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM :::::::::::::::::::::::::...

Speedy 1.0 - Arbitrary File Upload

Speedy 1.0 - Arbitrary File Upload Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM :::::::::::::::::::::::::...

Speedy 1.0 - Arbitrary File Upload

Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM ::::::::::::::::::::::::: =================Exploit================= DorK:No DorK ...

CodeAvalanche RateMySite (CARateMySite.mdb) Database Disclosure

Exploit for unknown platform in category web applications =============================================================== CodeAvalanche RateMySite CARateMySite.mdb Database Disclosure ===============================================================...