166 matches found
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-14863 FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
EUVD-2026-56976
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-14863 FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-14863
FileRun
PT-2026-70913
Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2026.2.1 Description Authenticated attackers can achieve remote code execution through an OS command injection. The issue occurs when the thumbnail generation system passes filenames wrapped in shell double-quotes...
CVE-2019-12905
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman=do=up URI. This issue has been fixed in FileRun 2019.06.01...
CVE-2019-12459
FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...
EUVD-2019-4065
Malware in sbrugna...
EUVD-2007-2463
Malware in sbrugna...
EUVD-2019-4067
Malware in sbrugna...
EUVD-2018-19449
Malware in sbrugna...
EUVD-2021-22146
Malware in sbrugna...
EUVD-2019-4483
Malware in sbrugna...
EUVD-2021-22145
Malware in sbrugna...
EUVD-2007-2462
Malware in sbrugna...
EUVD-2021-22147
Malware in sbrugna...