Skip to content
Threat Feed
Subscribe

Tag

File-Sharing

3 briefs RSS
high advisory

CVE-2026-64619: FileCodeBox Rate Limit Bypass Vulnerability

Unauthenticated attackers can bypass rate limits in FileCodeBox versions before 2.4 due to a vulnerability in the IPRateLimit class, allowing them to enumerate share codes and retrieve other users' files without authentication by spoofing X-Real-IP and X-Forwarded-For headers without proper verification.

FileCodeBox rate-limit-bypass vulnerability web-application file-sharing data-exfiltration cve
2t 1c 4i
high threat

Suspicious File Download From File Sharing Domain Via Curl.EXE

A high-severity threat involves the abuse of `curl.exe` on Windows systems to download potentially malicious files from various public file-sharing and content delivery network (CDN) domains, a technique observed in campaigns by threat actors such as FIN7, leading to further system compromise.

FIN7 +2 curl download file-sharing ingress-tool-transfer windows threat-hunting
1r 3t 36i
high advisory

Suspicious Download from File Sharing Website via LOLBins

Detection of suspicious downloads from file sharing and content delivery platforms using living-off-the-land binaries (LOLBins) to identify potential initial access, payload staging, or command and control activity.

Windows lolbin file-sharing cisco-nvm
3r 1t 26i