Lucene search
K

29 matches found

CVE
CVE
added 2020/11/13 4:0 p.m.114 views

CVE-2020-26222

CVE-2020-26222 affects Dependabot-Core (multiple package managers) where a source branch name containing malicious injectable bash code could trigger remote code execution during cloning. The vulnerability exists in dependabot-common and dependabot-go_modules for Dependabot-Core versions from 0.1...

8.8CVSS8.9AI score0.00477EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/11/13 3:47 p.m.54 views

Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.8CVSS8.9AI score0.00477EPSS
Exploits1References9Affected Software2
OSV
OSV
added 2020/11/13 3:47 p.m.25 views

GHSA-23F7-99JX-M54R Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.7CVSS8.9AI score0.00477EPSS
Exploits1References9
RubySec
RubySec
added 2020/11/13 12:0 a.m.19 views

Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...

8.8CVSS7.6AI score0.00477EPSS
Exploits1References1Affected Software1
Kitploit
Kitploit
added 2018/08/10 9:38 p.m.10 views

Blind Bash - Obfuscate And Protect Your Bash Code

You can use this tool to obfuscate your bash code. The obfuscation is the best way to hide important things in your code. This tool will give you blind & strong code , but everyone have knowledge in bash script can deobfuscate this code. So this obfuscation not %100 secure , don't let important...

7.3AI score
Exploits0References1
Arista
Arista
added 2014/09/29 12:0 a.m.214 views

Security Advisory 0006

Security Advisory 0006 PDF Date: September 29th 2014 Revision | Date | Changes ---|---|--- 1.0 | September 29th 2014 | Initial release 1.1 | September 30th 2014 | Additional details on maintenance releases 1.2 | October 29th 2014 | Additional details on fixed releases 1.3 | November 4th 2014 |...

10CVSS9.4AI score0.9422EPSS
Exploits150References2
myhack58
myhack58
added 2014/09/28 12:0 a.m.127 views

bash code injection security vulnerability-vulnerability warning-the black bar safety net

! bashbuga lot of people perhaps the upper half of the occurrence of the security issues of the“heart bleed”in Heartbleed Bug event memory is quite deep, this two days, there was also a“destruction level”of vulnerability-the Bash software security vulnerabilities. This vulnerability French...

10CVSS0.1AI score0.9422EPSS
Exploits139
Tenable Nessus
Tenable Nessus
added 2014/09/26 12:0 a.m.46 views

GLSA-201409-10 : Bash: Code Injection (Updated fix for GLSA 201409-09)

The remote host is affected by the vulnerability described in GLSA-201409-10 Bash: Code Injection Updated fix for GLSA 201409-09 Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code CVE-2014-6271. Gentoo Linux informed about th...

10CVSS9AI score0.9422EPSS
Exploits139References2
CheckPoint Security
CheckPoint Security
added 2014/09/24 9:0 p.m.34 views

Check Point Response to CVE-2014-6271 and CVE-2014-7169 Bash Code Injection vulnerability

...

10CVSS1.8AI score0.9422EPSS
Exploits139Affected Software1
Rows per page
Query Builder