CVE-2024-6651

CVE-2024-6651 POC XSS - CVE-2024-6651 CVE-2024-6651 भेद्यता के लिए कार्यात्मक PoC, जो WP File Upload प्लगइन 4.24.8 को प्रभावित करता है, और WordPress में Reflected Cross-Site Scripting XSS की अनुमति देता है। 📌 विवरण यह भेद्यता WP File Upload प्लगइन के प्रशासन पैनल में एक अशुद्ध पैरामीटर के माध्यम ...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

vm-filesystem

vm-filesystem Um bytecode Firebeam para interagir com o sistema de arquivos, além de aplicar monkey-patch na função Python para a interação com o Navegador de Arquivos da Interface Havoc, permitindo interagir com o sistema de arquivos remoto sem precisar tê-lo embutido. Este repositório também é...

CVE-2019-6447

CVE-2019-6447 ES फ़ाइल ब्राउज़र की सुरक्षा कमज़ोरी की उपरोक्त जाँच हमें इस समस्या को पूर्ण रूप से देखने की अनुमति देती है।...

CVE-2026-35585-poc

CVE-2026-35585: PoC de Injeção de Comandos do SO no File Browser Versão em inglês Visão Geral Este repositório é uma Prova de Conceito PoC da vulnerabilidade crítica de injeção de comandos do SO CVE-2026-35585 , descoberta no File Browser versões 2.0.0 a 2.33.1. Esta vulnerabilidade reside na...

CVE-2026-54088-poc

CVE-2026-54088: प्रमाणीकरण हुक में शेल प्रतिस्थापन द्वारा कमांड इंजेक्शन प्री-ऑथ RCE English version सारांश यह रिपॉजिटरी File Browser के संस्करण = 2.63.5 में मौजूद एक गंभीर OS कमांड इंजेक्शन भेद्यता CVE-2026-54088 का Proof of Concept PoC है। यह भेद्यता Hook Authentication सुविधा में मौजूद है। जब...

CVE-2026-104810

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2026-90929

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

CVE-2026-90930

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90928

File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust serv...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

EUVD-2026-77448

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930

File Browser through version 2.63.23 is vulnerable to a path rule bypass via symbolic link resolution. The application applies access-control path rules to the requested lexical path but fails to reapply those rules after resolving symbolic links to their actual targets. This allows authenticated...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90929 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...

EUVD-2026-77447

File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...