CVE-2025-56399

CVE-2025-56399 Mass Exploit CVE-2025-56399 – Remote Code Execution in laravel-file-manager v3.3.1. Exploits misconfigured config in Laravel File Manager to upload and verify a PHP shell via unauthenticated file upload. Installation Download repository root@kitploit: git clone...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

EUVD-2026-75752

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2026-18994

CVE-2026-18994 is a potential improper authorization vulnerability in the Lenovo File Manager Android Application , which is distributed exclusively in the Chinese market. A local authenticated user could read or modify protected files within the application. Lenovo rates this HIGH severity with ...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2025-63307

CVE-2025-63307 – Authenticated Stored Cross-site Scripting XSS in laravel-file-manager v3.3.1 🧭 Overview An authenticated Stored Cross-site Scripting XSS vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitra...

CVE-2025-65346

CVE-2025-65346 – Path Traversal autenticado desde la función UnZip que conduce a escritura arbitraria de archivos en laravel-file-manager v3.3.1 🧭 Resumen Una vulnerabilidad de Path Traversal en la funcionalidad de descompresión/extracción de la aplicación afectada permite a un atacante escribir...

FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790

CVE-2025-65790 - FuguHub 8.1 SVG XSS Reflejado Cross-Site Scripting XSS Reflejado mediante Renderizado SVG en FuguHub https://vulners.com/cve/CVE-2025-65790 Este repositorio documenta una vulnerabilidad de Cross-Site Scripting XSS Reflejado en FuguHub 8.1 , donde los archivos SVG que contienen...

CVE-2023-4861-PoC

PoC CVE-2023-4861 Este repositorio contiene una prueba de concepto en Python para CVE-2023-4861 , un problema de ejecución remota de código autenticada en el plugin de WordPress File Manager Pro - Filester. Resumen de la vulnerabilidad CVE: CVE-2023-4861 Producto: File Manager Pro - Filester...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Exploit de Tiny File Manager-2.4.3 Una vulnerabilidad de path traversal en la funcionalidad de carga de archivos en tinyfilemanager.php del Tiny File Manager del proyecto Tiny File Manager = 2.4.6 permite a atacantes remotos con cuentas de usuario válidas cargar archivos PHP...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Descripción : Explotar un ataque de falsificación de solicitudes entre sitios CSRF para obtener una inyección de comandos a través de la función del administrador de archivos de Webmin Versión probada : Webmin 1.973 versión más reciente de GitHub 07/03/2021 Tipo de...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

CVE-2019-6447

CVE-2019-6447 This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the...

FileManager

FileManager Hacked together File Manager for CVE-2022-46689...

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Proyecto para Trabajos del Curso NT205.P21.ANTT Ciberataque Explota el servidor Windows 2019 vulnerable a Zerologon con Garble, Chisel, Evil-WinRM, Impacket y un plugin de Wordpress vulnerable en una máquina Cliente Demostración en video:...

wordpress-rce-vapt-cve-2020-25213

WordPress: Explotación y Mitigación de RCE CVE-2020-25213 📌 Resumen del Proyecto Este proyecto fue desarrollado como parte del módulo IE4012 – Tácticas y Estrategias de Hacking Ofensivo. Demuestra un ciclo de vida completo de un ataque cibernético en un entorno de laboratorio controlado,...

CVE-2026-85401

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...