CVE-2025-23086

CVE-2025-23086 affects Brave Browser (versions 1.70.x–1.73.x) and concerns the feature that shows a site’s origin in the OS file selector dialog when a user is prompted to upload or download a file. The issue arises because the origin could be inferred incorrectly in certain cases, and when combi...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...