653 matches found
CVE-2025-5964-
CVE‑2025‑5964 M‑Files용 경로 탐색 PoC 저자: Byte Reaper 텔레그램: @ByteReaper0 개요 이 저장소는 M‑Files 버전 25.6.14925.0 에서 의심되는 경로 탐색Path Traversal 취약점에 대한 C 언어로 작성된 개념 증명PoC을 포함합니다. PoCexploit.c 파일는 REST API 엔드포인트에 탐색 페이로드를 주입하여 민감한 파일예: /etc/passwd을 읽으려고 시도합니다. 중요 공지 확인된 익스플로잇이 아님 : 모든 매개변수와 엔드포인트는 공개 문서와 OSINT에...
CVE-2026-18372
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
CVE-2026-18371
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
CVE-2026-18372 CSS injection in M-Files Web
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
CVE-2026-18372
M-Files Web before version 26.8.16330.2 is affected by a CSS injection vulnerability. An authenticated vault administrator can inject arbitrary CSS into the web user interface displayed to other vault users, resulting in low integrity impact on both the vulnerable and subsequent systems. The CVSS...
EUVD-2026-62370
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
EUVD-2026-62369
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
CVE-2026-18371
An authenticated attacker in M-Files Web before version 26.8.16330.2 can inject HTML to alter UI contents shown to other users, enabling potential phishing or content spoofing. CVSS 4.0 rates it MEDIUM (5.1) with low privileges required and passive user interaction. No exploitation evidence is re...
CVE-2026-18371 HTML injection in M-Files Web
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
PT-2026-78325
Name of the Vulnerable Software and Affected Versions M-Files Web versions prior to 26.8.16330.2 Description An authenticated attacker can perform HTML injection to modify the web user interface contents displayed to other users. Recommendations Update to version 26.8.16330.2...
PT-2026-78326
Name of the Vulnerable Software and Affected Versions M-Files Web versions prior to 26.8.16330.2 Description An authenticated vault administrator can inject arbitrary CSS into the web user interface. This allows the administrator to modify the visual presentation of the interface as displayed to...
CVE-2026-18371: Improper Neutralization of Input During Web Page Generation
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
CVE-2026-18372: Improper Neutralization of Input During Web Page Generation
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
CVE-2026-0931
Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart...
CVE-2026-0931
Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart...
EUVD-2026-53296
Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart...
CVE-2026-0931
CVE-2026-0931 : Denial-of-service in M‑Files Server (versions before 26.5.16015.3) allows an authenticated admin to crash the M‑Files Server process and fail to restart. Affected component: M‑Files Server; root cause details are not fully disclosed in the provided documents. Impact: availability ...
CVE-2026-0931 Denial-of-service vulnerability in M-Files Server
Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart...
CVE-2026-0931: Improper Validation of Syntactic Correctness of Input
Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart...
