Veno-File-Manager — PoC Archivehttps://poc.intelseclab.com/tags/veno-file-manager/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Veno File Manager Unauthenticated User Enumeration (CVE-2026-37064)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37064-veno-file-manager-user-enum/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37064-veno-file-manager-user-enum/Medium severity — web · CVE-2026-37064. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, user-enumeration, unauthenticated, cwe-203.webMediumveno-file-manageruser-enumerationunauthenticatedcwe-203Veno File Manager Path Traversal to Arbitrary File Read (CVE-2026-37066)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37066-veno-file-manager-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37066-veno-file-manager-path-traversal/High severity — web · CVE-2026-37066. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, path-traversal, arbitrary-file-read, authenticated, superadmin, cwe-22.webHighveno-file-managerpath-traversalarbitrary-file-readauthenticatedsuperadmincwe-22Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Medium severity — web · CVE-2026-37067. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, incorrect-access-control, log-disclosure, unauthenticated, cwe-284.webMediumveno-file-managerincorrect-access-controllog-disclosureunauthenticatedcwe-284Veno File Manager Arbitrary PHP File Overwrite (CVE-2026-37068)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37068-veno-file-manager-arbitrary-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37068-veno-file-manager-arbitrary-file-write/Critical severity — web · CVE-2026-37068. Status: Weaponized. Affects: Veno File Manager Project. Tags: veno-file-manager, arbitrary-file-write, rce, authenticated, superadmin, cwe-434.webCriticalveno-file-managerarbitrary-file-writerceauthenticatedsuperadmincwe-434Veno File Manager Arbitrary File Deletion (CVE-2026-37065)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37065-veno-file-manager-file-deletion/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37065-veno-file-manager-file-deletion/High severity — web · CVE-2026-37065. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, arbitrary-file-deletion, authenticated, superadmin, cwe-22.webHighveno-file-managerarbitrary-file-deletionauthenticatedsuperadmincwe-22Veno File Manager Absolute Path Disclosure (CVE-2026-37069)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Low severity — web · CVE-2026-37069. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, path-disclosure, unauthenticated, information-disclosure, cwe-200.webLowveno-file-managerpath-disclosureunauthenticatedinformation-disclosurecwe-200Veno File Manager 4.4.9 — Unauthenticated LFI to Superadmin Takeover (CVE-2026-37072)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Critical severity — web · CVE-2026-37072. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, unauthenticated, local-file-inclusion, account-takeover, php, veno-file-manager.webCriticalfile-managerunauthenticatedlocal-file-inclusionaccount-takeoverphpveno-file-managerVeno File Manager 4.4.9 — Unauthenticated Email Hijack via SMTP Relay (CVE-2026-37073)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37073-veno-file-manager-email-hijack/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37073-veno-file-manager-email-hijack/Medium severity — web · CVE-2026-37073. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, unauthenticated, smtp-relay, email-spoofing, incorrect-access-control, veno-file-manager.webMediumfile-managerunauthenticatedsmtp-relayemail-spoofingincorrect-access-controlveno-file-managerVeno File Manager 4.4.9 — Authenticated Arbitrary File Read (CVE-2026-37070)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37070-veno-file-manager-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37070-veno-file-manager-file-read/Medium severity — web · CVE-2026-37070. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, incorrect-access-control, arbitrary-file-read, php, authenticated, veno-file-manager.webMediumfile-managerincorrect-access-controlarbitrary-file-readphpauthenticatedveno-file-managerVeno File Manager 4.4.9 — Arbitrary File Rename to Privilege Escalation (CVE-2026-37071)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37071-veno-file-manager-rename-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37071-veno-file-manager-rename-privesc/High severity — web · CVE-2026-37071. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, privilege-escalation, arbitrary-file-rename, php, authenticated, veno-file-manager.webHighfile-managerprivilege-escalationarbitrary-file-renamephpauthenticatedveno-file-manager