CVE-2025-23086

Brave Browser versions 1.70.x through 1.73.x on most desktop platforms contain a vulnerability where the site origin is incorrectly inferred in the OS-provided file selector dialog during file uploads or downloads. An attacker can exploit this by using an open redirector on a trusted site to init...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...