Lucene search
K

8 matches found

EUVD
EUVD
added 2026/05/05 4:36 p.m.3 views

EUVD-2026-27396

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from processCommandAndResetClient when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger...

7.7CVSS6.1AI score0.00952EPSS
Exploits4References2
ATTACKERKB
ATTACKERKB
added 2026/05/05 4:36 p.m.2 views

CVE-2026-23479

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from processCommandAndResetClient when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger...

7.7CVSS6.1AI score0.00952EPSS
Exploits4References3Affected Software1
Cvelist
Cvelist
added 2026/03/02 7:17 p.m.27 views

CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS0.00177EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/02 7:17 p.m.3 views

CVE-2026-21882

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.00177EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/03/02 7:17 p.m.16 views

CVE-2026-21882

CVE-2026-21882 affects theshit, a command-line utility that detects and fixes shell command mistakes. In versions prior to 0.2.0, improper privilege dropping enables local privilege escalation via command re-execution. The issue is demonstrated as a local attack with high impact on confidentialit...

8.4CVSS5.8AI score0.00177EPSS
Exploits0References2
OSV
OSV
added 2026/03/02 7:17 p.m.4 views

CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.00177EPSS
Exploits0References4
OSV
OSV
added 2026/03/02 5:44 p.m.3 views

GHSA-2J3P-GQW5-G59J theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

Impact Vulnerability Type: Local Privilege Escalation LPE / Improper Privilege Management / Arbitrary Command Execution. The application automatically re-executes the previously failed command but does not properly drop elevated privileges during this process. When the tool is executed with sudo ...

8.4CVSS6.2AI score0.00177EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/02 12:0 a.m.5 views

The Shit 安全漏洞

The Shit is a command-line utility developed by AsfhtgkDavid, designed for automatically detecting and fixing common errors in shell commands. Versions of The Shit prior to 0.2.0 contained security vulnerabilities, which stemmed from improper privilege disposal. These vulnerabilities could...

8.4CVSS5.8AI score0.00177EPSS
Exploits0References2
Rows per page
Query Builder