CVE-2026-82237

filebrowser through 2.63.23 has a stale-share-link vulnerability: when a shared file is renamed, the share record (keyed by path) is not cleaned up—only deletion triggers cleanup. The record stays dormant (returning 404) until a new, unrelated file appears at the original path via re-upload, anot...

CVE-2026-82237 filebrowser through 2.63.23 Stale Share Link via File Rename

filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...

EUVD-2026-67689

filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...

EUVD-2026-67687

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

EUVD-2026-67688

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...

CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analista: Jonatan Alexander Guerrero Gomez | Ruolo Obiettivo: SOC L1 / Analista di Cybersecurity Junior Stato: Indagine Chiusa | Severità: Alta Executive Summary Esercizio proattivo di threat hunting che identifica un...

EUVD-2026-67670

None None None No publicly available exploits are known...

EUVD-2026-67667

None None None No publicly available exploits are known...

CVE-2026-40018

This CVE entry for CVE-2026-40018 is currently a placeholder with no publicly available technical details. The associated vendor is Open-Xchange (Dovecot). Monitor for updates.

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Versioni interessate: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename plugins-lst predefiniti root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gau...

CVE-2021-26086

CVE-2021-26084 root@kitploit: este é um script escrito em golang para explorar a Injeção OGNL do Confluence CVE-2021-26084. root@kitploit: git clone https://github.com/march0s1as/CVE-2021-26084/ cd CVE-2021-26084 go get -v github.com/fatih/color go build post.go ./post.go -h...

CVE-2026-12514

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

CVE-2017-16088

CVE-2017-16088 Exploit di CVE-2017-16088 https://www.wispwisp.com/?p=559...

CVE-2025-7847-POC

CVE-2025-7847 Wordpress-Plugin – POC für beliebigen Datei-Upload durch authentifizierte Abonnenten Wordpress-Plugin AI Engine 2.9.3 – 2.9.4 Proof of Concept Bitte beachten Sie, dass diese Schwachstelle nur dann ausgenutzt werden kann, wenn die Option „Public API“ aktiviert ist standardmäßig...

CVE-2018-0114

CVE-2018-0114 script python2.7 per generazione JWT CVE-2018-0114 Una vulnerabilità nella libreria open source Cisco node-jose precedente alla versione 0.11.0 potrebbe consentire a un utente malintenzionato remoto non autenticato di ri-firmare token utilizzando una chiave incorporata nel token. La...

BlockChainConstruction

Prefácio Neste artigo, apresentamos principalmente vários aspectos da auditoria de cadeia pública que merecem atenção. Para auditores de segurança e desenvolvedores de cadeias públicas, este é um projeto digno de referência e reflexão. Arquitetura Antes de apresentar a construção do sistema de...

CVE-2021-40444

CVE-2021-40444 CVE-2021-40444 POC -----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu0enjPUx4R0+zWyY4FEI 0LUeiAJecPz6iDPdMRiIQHBPZBxKH7A+losAu7DB9IoY1GnGvFJzA1G4UkK6n/rg 2r65Ym3SloHoov/IxC2qcyz1UBftD0HBR8KE9Yy84k1sYIdNzKeWPQETY9UqEEy/...

CVE-2023-28252-

CVE-2023-28252- Erkennung des Exploits CVE-2023-28252. Überwachung der Dateierstellung in dem Verzeichnis, in dem der Exploit die für die Ausnutzung verwendeten Dateien hinterlässt, auf dem festen Pfad im Ordner "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" und...