https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T21:17:01.678081+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121451 fkie_cve-2026-121451 2026-11-04T21:17:01.679091+00:00

AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. A malicious web page can send a text/plain request to /start-headless-download with crafted folder and name values, placing payloads in startup folders for code execution on next login.

 https://db.gcve.eu/vuln/ghsa-v768-hp7c-4rf7 GHSA-v768-hp7c-4rf7 2026-11-04T21:17:01.679165+00:00

AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. A malicious web page can send a text/plain request to /start-headless-download with crafted folder and name values, placing payloads in startup folders for code execution on next login.