15 matches found
CVE-2026-110231
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
CVE-2026-110231
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
EUVD-2026-99015
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
CVE-2026-110231 muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
CVE-2026-110231 muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
CVE-2026-110231
Versions of muCommander through 1.6.2 are vulnerable to a path traversal vulnerability in the UnpackJob component. The root cause is a failure to properly normalize remote paths, allowing attackers to bypass ZipSlip checks during archive extraction. By crafting malicious TAR or ZIP entries (e.g.,...
PT-2026-111854
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorized keys that, when...
CVE-2026-110231: Improper Limitation of a Pathname to a Restricted Directory
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
EUVD-2008-1968
Malware in sbrugna...
Path Traversal in mucommander/mucommander
:book: Description mucommander A lightweight, cross-platform file manager with a dual-pane interface. This package is vulnerable for zip-slip. https://github.com/mucommander/mucommander https://www.mucommander.com/ :recycle: Steps To Reproduce-: 0 download and run latest release from...
Default credentials
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, allowing local users to obtain credentials. The issue is documented across multiple sources (NVD, CVE lists, and vendor references). Affected component: credentials.xml handling in muCommander; root cause: insecure file pe...