Lucene search
+L

7 matches found

SUSE CVE
SUSE CVE
•added 2026/07/30 4:56 p.m.•18 views

SUSE CVE-2026-35585

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser - which executes administrator-defined shell commands on file events such as upload, rename, and delete...

7.5CVSS8.8AI score0.01922EPSS
SaveExploits2References2
EUVD
EUVD
•added 2026/04/08 12:04 a.m.•18 views

EUVD-2026-19775

File Browser has a Command Injection via Hook Runner...

7.5CVSS8.3AI score0.01922EPSS
SaveExploits2References3
NVD
NVD
•added 2026/04/07 5:16 p.m.•19 views

CVE-2026-35585

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser — which executes administrator-defined shell commands on file events such as upload, rename, and delete...

7.5CVSS0.01922EPSS
SaveExploits2References2
CVE
CVE
•added 2026/04/07 4:20 p.m.•51 views

CVE-2026-35585

CVE-2026-35585 affects File Browser versions 2.0.0–2.63.1. The hook system that runs administrator-defined shell commands on file events (upload/rename/delete) is vulnerable to OS command injection because values like $FILE and $USERNAME are substituted via os.Expand without sanitization. An atta...

7.5CVSS8.7AI score0.01922EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2026/04/07 4:20 p.m.•13 views

CVE-2026-35585

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser — which executes administrator-defined shell commands on file events such as upload, rename, and delete...

7.5CVSS8.7AI score0.01922EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•22 views

PT-2026-30904

Name of the Vulnerable Software and Affected Versions File Browser versions 2.0.0 through 2.33.8 Description The hook system in File Browser, which executes administrator-defined shell commands during file events such as upload, rename, and delete, is susceptible to OS command injection. The issu...

7.5CVSS8.6AI score0.01922EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/07 12:00 a.m.•5 views

CVE-2026-35585: Improper Neutralization of Special Elements used in an OS Command

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser — which executes administrator-defined shell commands on file events such as upload, rename, and delete...

7.5CVSS8.8AI score0.01922EPSS
SaveExploits2References6
Rows per page
Query Builder