Lucene search
+L

36 matches found

Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•637 views

Laravel Filemanager v2.5.1 - Local File Inclusion

Laravel Filemanager aka UniSharp through version 2.5.1 is vulnerable to local file inclusion via download?workingdir=%2F. id: CVE-2022-40734 info: name: Laravel Filemanager v2.5.1 - Local File Inclusion author: arafatansari severity: medium description: | Laravel Filemanager aka UniSharp through...

6.5CVSS6.7AI score0.05183EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2026/09/23 5:29 p.m.•17 views

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

9.8CVSS8.5AI score0.01311EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•12 views

The vulnerability of the UniSharp laravel-filemanager software package, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the UniSharp laravel-filemanager software package is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.1AI score0.01311EPSS
SaveExploits2References3Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-0578

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01771EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-3559

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.01311EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2025/05/22 11:25 p.m.•17 views

CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

6.5CVSS6.8AI score0.05183EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/05/08 11:05 p.m.•8 views

Arbitrary Code Injection

Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Arbitrary Code Injection through using a valid mimetype and inserting the . character after the php file extension. Thi...

9.8CVSS5.8AI score0.01311EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/02/05 10:51 a.m.•17 views

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS7.5AI score0.01311EPSS
SaveExploits2References1
Github Security Blog
Github Security Blog
•added 2024/12/18 6:30 a.m.•33 views

UniSharp Laravel Filemanager Code Injection vulnerability

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS7.7AI score0.01311EPSS
SaveExploits2References5Affected Software1
OSV
OSV
•added 2024/12/18 6:30 a.m.•23 views

GHSA-6569-3785-R3V6 UniSharp Laravel Filemanager Code Injection vulnerability

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS9.8AI score0.01311EPSS
SaveExploits2References5
NVD
NVD
•added 2024/12/18 6:15 a.m.•27 views

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS0.01311EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2024/12/18 6:06 a.m.•37 views

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS0.01311EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2024/12/18 6:06 a.m.•17 views

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.8CVSS9.8AI score0.01311EPSS
SaveExploits2References3
OSV
OSV
•added 2024/12/18 6:06 a.m.•22 views

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

9.3CVSS7.6AI score
SaveExploits0References5
CVE
CVE
•added 2024/12/18 6:06 a.m.•208 views

CVE-2024-21546

The CVE-2024-21546 entry specifies a Laravel Filemanager (unisharp/laravel-filemanager) vulnerability: versions before 2.9.1 are susceptible to Remote Code Execution (RCE) via a crafted request that uses a valid mimetype and inserts a dot after the PHP file extension, enabling execution of arbitr...

9.8CVSS10AI score0.01311EPSS
SaveExploits2References3
OSV
OSV
•added 2022/09/15 12:00 a.m.•93 views

GHSA-5M2H-7RF2-RPX6 UniSharp Laravel Filemanager directory traversal vulnerability

UniSharp laravel-filemanager aka Laravel Filemanager with league/flysystem version = 2.0.0...

6.5CVSS6.3AI score0.05183EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2022/09/15 12:00 a.m.•38 views

UniSharp Laravel Filemanager directory traversal vulnerability

UniSharp laravel-filemanager aka Laravel Filemanager with league/flysystem version = 2.0.0...

6.5CVSS6.3AI score0.05183EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2022/09/14 11:15 p.m.•54 views

CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

6.5CVSS0.05183EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/09/14 11:15 p.m.•492 views

CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

6.5CVSS6.7AI score0.05183EPSS
SaveIn wildExploits1References5
Prion
Prion
•added 2022/09/14 11:15 p.m.•36 views

Directory traversal

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

4CVSS6.3AI score0.05183EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder