416 matches found
CVE-2021-46398
CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU 이 저장소에서는 docker compose를 통한 CVE-2021-46398 취약점 악용의 개념 증명과 해당 취약점이 정보 시스템에 미치는 영향에 대한 분석을 확인할 수 있습니다. root@kitploit: Exploit Title: FileBrowser 2.17.2 - Cross Site Request Forgery CSRF to Remote Code Execution RCE Date: 05/02/2022 Exploit Author: FEBI...
CVE-2026-25890-FileBrowser-Access-Control-Bypass
CVE-2026-25890 - FileBrowser 접근 제어 우회 인증되지 않은 사용자는 이 취약점을 악용할 수 없습니다 — 대상 경로에 대한 접근이 제한된 유효한 낮은 권한의 자격 증명이 필요합니다. FileBrowser ≤ v2.57.0에서 여러 개의 선행 슬래시/private 대신 //private를 사용하여 strings.HasPrefix 검사를 우회하는 경로 기반 인증 우회입니다. 파일시스템은 여전히 정규화된 경로를 제공합니다. v2.57.1 에서 수정됨 커밋 489af403... – 제거...
CVE-2013-6987
CVE-2013-6987 Множественные уязвимости обхода каталогов в компонентах FileBrowser в Synology DiskStation Manager DSM до версии 4.3-3810 Update 3 позволяют удаленным злоумышленникам читать, записывать и удалять произвольные файлы с помощью .. dot dot Использование: root@kitploit: python example:...
CVE-2026-82235
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-82237
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
CVE-2026-82238
filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...
EUVD-2026-67690
filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...
CVE-2026-82238 filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads
filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...
CVE-2026-82238
filebrowser version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to bypass upload-length validation by sending multiple concurrent PATCH requests at the same offset. This results in files that exceed their declared Upload-Length and triggers completio...
CVE-2026-82237 filebrowser through 2.63.23 Stale Share Link via File Rename
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
CVE-2026-82237
filebrowser through 2.63.23 has a stale-share-link vulnerability: when a shared file is renamed, the share record (keyed by path) is not cleaned up—only deletion triggers cleanup. The record stays dormant (returning 404) until a new, unrelated file appears at the original path via re-upload, anot...
CVE-2026-82237 filebrowser through 2.63.23 Stale Share Link via File Rename
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
EUVD-2026-67689
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
EUVD-2026-67687
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-82235
filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...
CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-54089 vulnerabilities
Vulnerabilities for packages: filebrowser...