CVE-2025-56399

CVE-2025-56399 Exploitation de masse CVE-2025-56399 – Exécution de code à distance dans laravel-file-manager v3.3.1. Exploite une configuration erronée dans Laravel File Manager pour téléverser et vérifier un shell PHP via un téléversement de fichier non authentifié. Installation Télécharger le...

CVE-2025-65345

CVE-2025-65345 – تجاوز المسار المُصادق عليه من وظيفة الضغط يؤدي إلى كشف نظام الملفات في laravel-file-manager v3.3.1 🧭 نظرة عامة ثغرة تجاوز الدليل المُصادق عليه في laravel-file-manager v3.3.1 والإصدارات الأقدم تسمح للمهاجمين الذين لديهم وصول إلى واجهة مدير الملفات باستخدام وظيفة الضغط/الأرشفة لإنش...

CVE-2025-63307

CVE-2025-63307 – ثغرة تخزينية للبرمجة النصية عبر المواقع XSS مع مصادقة في laravel-file-manager الإصدار 3.3.1 🧭 نظرة عامة ثغرة تخزينية للبرمجة النصية عبر المواقع XSS مع مصادقة في laravel-file-manager الإصدار 3.3.1 والإصدارات الأدنى تسمح للمهاجمين الذين لديهم حق الوصول إلى واجهة مدير الملفات بحقن...

CVE-2025-65346

CVE-2025-65346 – ثغرة اجتياز المسار المُوثّقة من دالة UnZip تؤدي إلى كتابة ملفات تعسفية في laravel-file-manager الإصدار 3.3.1 🧭 نظرة عامة ثغرة اجتياز المسار في وظيفة فك الضغط/استخراج الملفات داخل التطبيق المصاب تسمح للمهاجم بكتابة ملفات في مواقع نظام ملفات تعسفية أثناء استخراج الأرشيف. نظرًا لأن...

laravel-filemanager-unrestricted-upload

رفع ملف غير مقيد في Laravel FileManager CVE-2025-56399 CWE-434: رفع غير مقيد لملف بنوع خطير درجة CVSS: 8.5 عالية 📋 الوصف توفر هذه الأداة إثبات المفهوم PoC لـ CVE-2025-56399 ، وهي ثغرة أمنية خطيرة في alexusmai/laravel-file-manager الإصدارات ≤ 3.3.1. تسمح الثغرة لـمهاجم مصادق بتحقيق تنفيذ تعليمات...

CVE-2025-56399

CVE-2025-56399 – تنفيذ تعليمات برمجية عن بُعد مصادق عليه في laravel-file-manager الإصدار 3.3.1 🧭 نظرة عامة ثغرة تنفيذ تعليمات برمجية عن بُعد RCE مصادق عليها في laravel-file-manager الإصدار 3.3.1 والإصدارات الأقدم تسمح للمهاجمين الذين لديهم إمكانية الوصول إلى واجهة مدير الملفات بتنفيذ تعليمات برمج...

Exploit for CVE-2025-56399

Laravel FileManager Unrestricted File Upload CVE-2025-56399...

EUVD-2019-20081

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 expose an arbitrary file upload vulnerability at the upload endpoint. An authenticated attacker can submit multipart form data to upload PHP files via the type parameter set to Files, then access the uploaded file in the working directory path ...

CVE-2019-25673: Unrestricted Upload of File with Dangerous Type

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

Laravel File Manager 代码问题漏洞

Laravel File Manager is a file manager developed by Aleksandr Manekin. The Laravel File Manager v2.0.0-alpha7 and v2.0 versions have code vulnerabilities. These vulnerabilities stem from the possibility of arbitrary file uploads, which could allow authenticated attackers to upload malicious files...

PT-2026-30482

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

Directory Traversal

alexusmai laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to improper path validation in the zip/archiving functionality, which allows an attacker to create crafted archives that include files and directories outside the intended scope...

Directory Traversal

alexusmai/laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to insufficient validation of extraction paths during archive unzip functionality, which allows an attacker to write files to arbitrary locations on the filesystem...

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...