24 matches found
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arb...
UBUNTU-CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arb...
Linux Distros Unpatched Vulnerability : CVE-2026-95168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in...
CVE-2026-95168
A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...
DEBIAN-CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
CVE-2026-95168
The utility nvbn thefuck v.3.32 is vulnerable to arbitrary code execution due to insecure import path resolution. A local attacker can supply malicious rule files, which the application evaluates from untrusted paths during loading. This flaw originates from the get_rules_import_paths function in...
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
EUVD-2026-105081
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
PT-2026-118415
Name of the Vulnerable Software and Affected Versions nvbn thefuck version 3.32 Description A local attacker can execute arbitrary code through the get rules import paths function in thefuck/corrector.py and the Rule.from path function in thefuck/types.py. Recommendations At the moment, there is ...
Linux Distros Unpatched Vulnerability : CVE-2021-34363
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...
Fedora: Security Advisory for thefuck (FEDORA-2022-0f1653e269)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: thefuck-3.32-1.fc34
This application corrects your previous console command. If you use BASH, you should add these lines to your .bashrc: alias fuck=3D'eval $thefuck $fc -ln -1; history -r' alias FUCK=3D'fuck' For other shells please check /usr/share/doc/thefuck/README.md...
TheFuck Path Traversal
The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...
[ASA-202106-39] thefuck: arbitrary file overwrite
Arch Linux Security Advisory ASA-202106-39 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-34363 Package : thefuck Type : arbitrary file overwrite Remote : No Link : https://security.archlinux.org/AVG-2062 Summary ======= The package thefuck before...
thefuck path traversal vulnerability
thefuck is an open source application. Corrects errors in previous console commands. A path traversal vulnerability exists in thefuck, which can be exploited to arbitrarily delete files via the "undo archive operation" feature...
DEBIAN-CVE-2021-34363
The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...