8 matches found
CVE-2026-73693
FileRun before 2026.3.0 is vulnerable to OS command injection in the PhotoProofSheet handler. The root cause is a missing escapeshellarg() call when constructing the ImageMagick montage command, allowing authenticated users with upload permission to execute arbitrary commands by uploading files w...
CVE-2026-73693 FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary commands by uploading files with shell metacharacters in their names. Attackers can upload a file containing command...
EUVD-2004-2276
Malware in sbrugna...
EUVD-2013-2063
Malware in sbrugna...
EUVD-2022-2162
Malicious code in bioql PyPI...
CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...