795 matches found
EUVD-2026-85402
CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...
CVE-2026-79306
CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...
CVE-2026-79306
CyberPanel v1.9.1 is vulnerable to a path traversal vulnerability in the compress method via the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can provide absolute or out-of-scope file paths in the listOfFiles JSON property, along with ...
FileManager
FileManager Hacked together File Manager for CVE-2022-46689...
CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...
CVE-2022-44276-PoC
CVE-2022-44276-PoC PoC para Responsive Filemanager 9.12.0: evasión de las restricciones de subida que conduce a RCE ¿Dónde está la vulnerabilidad? Al subir un archivo nuevo pasamos por la función fixfilename:...
CVE-2020-10567
POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. 不是主分支 ⚠️ Github 项目 : https://github.com/trippo/ResponsiveFilemanager 要求：无要求，该利用无需认证。 Responsive Filemanager 应用程序是一个基于 Web 的文件管理工具，用于处理服务器上的文件。此漏洞（CVE-2020-10567）允许攻击者利用 ajaxcalls.php?action=saveimg 中不当的输入验证来执行任意文件上传，从而导致在目标系统上远程执行代码。...
CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager
RiteCMS 3.0 Subida de Archivos - XSS Autor: Sergio Descripción: La vulnerabilidad de subida de archivos en RiteCMS 3.0 permite a un atacante local subir un archivo svg con contenido XSS. Vectores de ataque: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L Prueba de concepto: Creamos un archivo svg con el...
WordPress-HT-Contact-CVE-2025-7340-RCE
WordPress HT Contact Form Widget | CVE-2025-7340 Análisis de la vulnerabilidad de carga de archivos Ubicación de la vulnerabilidad Ubicación de la vulnerabilidad: ht-contactform/admin/Includes/Services/FileManager.php Función clave: tempfileupload 1. Punto principal de la vulnerabilidad: función...
CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...
cve-2026-16219-croogo-lab
CVE-2026-16219: Laboratorio defensivo del FileManager de Croogo Este repositorio documenta y demuestra de forma segura la falla de autorización de rutas registrada como CVE-2026-16219 en Croogo CMS. Está dirigido a defensores, mantenedores, estudiantes e investigadores que prueban sistemas propio...
CVE-2023-26563-26564-26565
The vendor has reportedly fixed all vulnerabilities detailed as of releases made after 2024. Ruptura InfoSecurity has not verified that these fixes are complete. See vendor comments in https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/issues/1. CVE-2023-26563 - Local File Read in ASPCo...
Exploit for CVE-2024-21546
UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-215...
CVE-2026-18788
A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...
CVE-2026-18788 Trippo ResponsiveFilemanager dialog.php unrestricted upload
A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...
CVE-2026-18788
A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...
CVE-2026-16219
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2026-16219 Croogo CMS Admin File Manager FileManager.php isEditable path traversal
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2026-16219
CVE-2026-16219 affects Croogo CMS versions up to 4.0.7. The vulnerability lies in the Admin File Manager component, specifically FileManager::isEditable in FileManager/src/Utility/FileManager.php, leading to path traversal. Exploitation can be performed remotely; a working exploit has been publis...