Tag

Github-Advisory

2 briefs RSS

File Browser Share Links Accessible After Permission Revocation

File Browser share links remain accessible after Share/Download permissions are revoked, allowing continued access to shared files even after an administrator revokes the user's permissions.

filebrowser authorization-bypass github-advisory cve-2026-35604

3r 1t 1c 3w ago

medium advisory

Monetr Lunch Flow SSRF Vulnerability

2 rules 1 TTP 1 IOC

A server-side request forgery (SSRF) vulnerability in Monetr's Lunch Flow integration allows authenticated users on self-hosted instances to send HTTP GET requests to arbitrary URLs, potentially exposing sensitive information.

Monetr ssrf monitr github-advisory

2r 1t 1i May 2, 2024