Filtered by vendor Amir1376 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-121451 1 Amir1376 1 Ab-download-manager 2026-11-07 8.8 High
AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. A malicious web page can send a text/plain request to /start-headless-download with crafted folder and name values, placing payloads in startup folders for code execution on next login.