234 matches found
Rejetto HTTP File Server - Template injection
This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...
CVE-2026-11841 CVE-2026-11841
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...
HTTP File Server <2.3c - Remote Command Execution
HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...
EUVD-2026-43506
Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs ar...
Exploit for Code Injection in Rejetto Http_File_Server
!BobXploit Cybersecurityhttps://img.shields.io/badge/BobXplo...
EUVD-2026-26753
A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipartFile/HttpFileToMultipartFileUtil.downloadImageData of the file CommonController.java of the component...
Exploit for Code Injection in Rejetto Http_File_Server
Optimum --- Optimum – Hack The Box Writeup Overview I...
CVE-2023-4118
A vulnerability, which was classified as problematic, was found in Cute Http File Server 2.0. This affects an unknown part of the component Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...
EUVD-2019-0574
Malware in sbrugna...
EUVD-2008-0415
Malware in sbrugna...
EUVD-2008-0416
Malware in sbrugna...
EUVD-2014-7098
Malware in sbrugna...
EUVD-2008-0420
Malware in sbrugna...
EUVD-2008-0418
Malware in sbrugna...
EUVD-2016-2332
Malware in sbrugna...
EUVD-2008-0417
Malware in sbrugna...
EUVD-2008-0419
Malware in sbrugna...
EUVD-2019-0582
Malware in sbrugna...