CVE-2025-56399

Exploração em Massa CVE-2025-56399 CVE-2025-56399 – Execução Remota de Código no laravel-file-manager v3.3.1. Explora uma configuração mal configurada no Laravel File Manager para fazer upload e verificar um shell PHP através de upload de arquivo não autenticado. Instalação Baixar o repositório g...

CVE-2025-65345

CVE-2025-65345 – laravel-file-manager v3.3.1 में ज़िप फ़ंक्शन से प्रमाणित पथ ट्रैवर्सल Authenticated Path Traversal जो फ़ाइलसिस्टम प्रकटीकरण की ओर ले जाता है 🧭 अवलोकन laravel-file-manager v3.3.1 और उससे नीचे के संस्करणों में एक प्रमाणित डायरेक्टरी ट्रैवर्सल Authenticated Directory Traversal भेद्य...

CVE-2025-63307

CVE-2025-63307 – laravel-file-manager v3.3.1 में प्रमाणित संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS 🧭 अवलोकन laravel-file-manager v3.3.1 और इससे नीचे के संस्करणों में एक प्रमाणित संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है, जो फ़ाइल प्रबंधक इंटरफ़ेस तक पहुँच रखने वाले हमलावरों को अपलोड या बन...

CVE-2025-65346

CVE-2025-65346 – Path Traversal Autenticado a Partir da Função UnZip Levando à Escrita Arbitrária de Arquivos no laravel-file-manager v3.3.1 🧭 Visão Geral Uma vulnerabilidade de Path Traversal na funcionalidade de descompactação/extração unzip/extract da aplicação afetada permite que um atacante...

laravel-filemanager-unrestricted-upload

Laravel FileManager असीमित फाइल अपलोड CVE-2025-56399 CWE-434: खतरनाक प्रकार की फाइल का असीमित अपलोड CVSS स्कोर: 8.5 उच्च 📋 विवरण यह उपकरण CVE-2025-56399 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC प्रदान करता है, जो alexusmai/laravel-file-manager संस्करण ≤ 3.3.1 में एक गंभीर कमजोरी है। यह कमजोरी एक प्रमाणित...

CVE-2025-56399

CVE-2025-56399 – Execução Remota de Código Autenticada em laravel-file-manager v3.3.1 🧭 Visão Geral Uma vulnerabilidade de Execução Remota de Código RCE autenticada no laravel-file-manager v3.3.1 e anteriores permite que atacantes com acesso à interface do gerenciador de arquivos executem código...

Exploit for CVE-2025-56399

Laravel FileManager Unrestricted File Upload CVE-2025-56399...

EUVD-2019-20081

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 expose an arbitrary file upload vulnerability at the upload endpoint. An authenticated attacker can submit multipart form data to upload PHP files via the type parameter set to Files, then access the uploaded file in the working directory path ...

CVE-2019-25673: Unrestricted Upload of File with Dangerous Type

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

Laravel File Manager 代码问题漏洞

Laravel File Manager is a file manager developed by Aleksandr Manekin. The Laravel File Manager v2.0.0-alpha7 and v2.0 versions have code vulnerabilities. These vulnerabilities stem from the possibility of arbitrary file uploads, which could allow authenticated attackers to upload malicious files...

PT-2026-30482

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

Directory Traversal

alexusmai laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to improper path validation in the zip/archiving functionality, which allows an attacker to create crafted archives that include files and directories outside the intended scope...

Directory Traversal

alexusmai/laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to insufficient validation of extraction paths during archive unzip functionality, which allows an attacker to write files to arbitrary locations on the filesystem...

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...