cgit CRLF Injection Vulnerability

cgit is a web front-end for git repositories written in C . A CRLF injection vulnerability exists in the 'cgitprinthttpheaders' function in the ui-shared.c file in cgit versions prior to 0.12. A remote attacker can exploit this vulnerability by injecting arbitrary HTTP headers with 'write...

Command injection

comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs...

security flaw

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script...

DEBIAN-CVE-2003-1308

CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename...