Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

EUVD-2026-120111

Improper access control in Progress WSFTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users...

CVE-2026-119657 FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

PT-2026-133587

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm by uid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

CVE-2026-114256

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

EUVD-2026-107332

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function savefolder/deletefolder/deletefile/filerename/savefiles of the file adminclass.php of the component Folder Management. This manipulation of the argument...

CVE-2026-114256

A SQL injection vulnerability exists in the Folder Management component of oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). The flaw is located in the admin_class.php file and affects the save_folder , delete_folder , delete_file , file_rename , and sa...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of parameters such as name, parentid, id, type, folderid, and description in the savefolder, deletefolder, deletefile, filerename, and savefiles functions within the adminclass.p...

PT-2026-120668

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save folder/delete folder/delete file/file rename/save files of the file admin class.php of the component Folder Management. This manipulation of the...

[SECURITY] Fedora 43 Update: roundcubemail-1.6.12-1.fc43

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

EUVD-2021-17244

Malware in sbrugna...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224)

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 KB5063224 Original article content This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common...

CVE-2019-19663

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html...

CVE-2024-7858 Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions

The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several AJAX functions in the media-library-plus.php file in all versions up to, and including, 8.2.3. This makes it possible for authenticated attackers, with subscriber-level...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab...

OPENSUSE-SU-2023:0090-1 Security update for nextcloud-desktop

This update for nextcloud-desktop fixes the following issues: nextcloud-desktop was updated to 3.8.0: - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local...