CVE-2019-6447

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.

• CWE-306

• http://packetstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/fs0c131y/ESFileExplorerOpenPortVulnExploit, Third Party Advisory
• https://twitter.com/fs0c131y/status/1085460755313508352Third Party Advisory
• http://packetstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/fs0c131y/ESFileExplorerOpenPortVulnExploit, Third Party Advisory
• https://twitter.com/fs0c131y/status/1085460755313508352Third Party Advisory

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6441An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, …
• CVE-2019-6442An issue was discovered in NTPsec before 1.1.3. An authentic…
• CVE-2019-6443An issue was discovered in NTPsec before 1.1.3. Because of a…
• CVE-2019-6444An issue was discovered in NTPsec before 1.1.3. process_cont…
• CVE-2019-6445An issue was discovered in NTPsec before 1.1.3. An authentic…
• CVE-2019-6446An issue was discovered in NumPy before 1.16.3. It uses the …
• CVE-2019-6451On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs all…7.5
• CVE-2019-6452Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci a…8.8
• CVE-2019-6453mIRC before 7.55 allows remote command execution by using ar…
• CVE-2019-6454An issue was discovered in sd-bus in systemd 239. bus_proces…5.5
• CVE-2019-6455An issue was discovered in GNU Recutils 1.8. There is a doub…
• CVE-2019-6456An issue was discovered in GNU Recutils 1.8. There is a NULL…