Lucene search
K

11 matches found

Veracode
Veracode
added 2025/12/13 6:50 a.m.1 views

Directory Traversal

alexusmai laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to improper path validation in the zip/archiving functionality, which allows an attacker to create crafted archives that include files and directories outside the intended scope...

6.5CVSS5.9AI score0.00027EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/04 3:17 a.m.4 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS7AI score0.00027EPSS
Exploits1References1
OSV
OSV
added 2025/12/03 9:31 p.m.6 views

GHSA-RR44-8J7R-JG2Q alexusmai laravel-file-manager is vulnerable to Directory Traversal

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.3CVSS6.9AI score0.00027EPSS
Exploits1References3
NVD
NVD
added 2025/12/03 8:16 p.m.4 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS0.00027EPSS
Exploits1References2
OSV
OSV
added 2025/12/03 8:16 p.m.4 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS6.9AI score0.00027EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.16 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

0.00027EPSS
Exploits1References2
GitLab Advisory Database
GitLab Advisory Database
added 2025/12/03 12:0 a.m.6 views

alexusmai laravel-file-manager is vulnerable to Directory Traversal

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.5CVSS7AI score0.00027EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2025/12/03 12:0 a.m.11 views

CVE-2025-65345

CVE-2025-65345 affects alexusmai laravel-file-manager up to version 3.3.1. The issue is a directory traversal vulnerability in the zip/archiving feature caused by improper path validation, enabling archives to contain files outside the intended scope. Connected sources corroborate the description...

6.5CVSS6.6AI score0.00027EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.3 views

PT-2025-48994

Name of the Vulnerable Software and Affected Versions alexusmai laravel-file-manager versions 3.3.1 and below Description The laravel-file-manager software contains a flaw related to directory traversal. The zip/archiving functionality does not properly validate paths, allowing an attacker to...

6.5CVSS6.4AI score0.00027EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.3 views

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

6.6AI score0.00027EPSS
Exploits1References2
The Hacker News
The Hacker News
added 2013/07/16 6:59 p.m.8 views

Chinese Hackers discovered second Android master key vulnerability

Android Security Squad, the China-based group that uncovered a second Android master key vulnerability that might be abused to modify smartphone apps without breaking their digital signatures. The whole point of digitally signing a document or file is to prove the file hasn't been modified. The...

7AI score
Exploits0
Rows per page
Query Builder