PoC Archive PoC Archive

tag

Veno-File-Manager

Medium
Veno File Manager Unauthenticated User Enumeration (CVE-2026-37064)
CVE-2026-37064· Veno File Manager Project unpatched
High
Veno File Manager Path Traversal to Arbitrary File Read (CVE-2026-37066)
CVE-2026-37066· Veno File Manager Project unpatched
Medium
Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067)
CVE-2026-37067· Veno File Manager Project unpatched
Critical
Veno File Manager Arbitrary PHP File Overwrite (CVE-2026-37068)
CVE-2026-37068· Veno File Manager Project unpatched
High
Veno File Manager Arbitrary File Deletion (CVE-2026-37065)
CVE-2026-37065· Veno File Manager Project unpatched
Low
Veno File Manager Absolute Path Disclosure (CVE-2026-37069)
CVE-2026-37069· Veno File Manager Project unpatched
Critical
Veno File Manager 4.4.9 — Unauthenticated LFI to Superadmin Takeover (CVE-2026-37072)
CVE-2026-37072· Veno File Manager Project unpatched
Medium
Veno File Manager 4.4.9 — Unauthenticated Email Hijack via SMTP Relay (CVE-2026-37073)
CVE-2026-37073· Veno File Manager Project unpatched
Medium
Veno File Manager 4.4.9 — Authenticated Arbitrary File Read (CVE-2026-37070)
CVE-2026-37070· Veno File Manager Project unpatched
High
Veno File Manager 4.4.9 — Arbitrary File Rename to Privilege Escalation (CVE-2026-37071)
CVE-2026-37071· Veno File Manager Project unpatched