CVE-2026-35607

creationtimestamp| type| source ---|---|--- 2026-04-04 20:31:28+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-7526-j432-6ppp 2026-04-07 19:33:54+00:00| seen| Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4 2026-04-07 19:34:12+00:00...

CVE-2026-32867

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2022-34093

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting XSS vulnerability via accesstoken.php...

MAL-2022-5515 Malicious code in public-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8346ab3983e1f424b89fcf805f9d9493c1bc54b8dbb262eab74ed75a028760a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in public-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8346ab3983e1f424b89fcf805f9d9493c1bc54b8dbb262eab74ed75a028760a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...