Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/10 7:24 p.m.5 views

GHSA-V8G7-9Q6V-P3X8 PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

Summary The executecommand function in shelltools.py calls os.path.expandvars on every command argument at line 64, manually re-implementing shell-level environment variable expansion despite using shell=False line 88 for security. This allows exfiltration of secrets stored in environment variabl...

7.4CVSS6.2AI score0.00273EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2011/08/09 12:00 a.m.28 views

CentOS Update for sudo CESA-2010:0475 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.2CVSS5.2AI score0.00457EPSS
SaveExploits1References2
Rows per page
Query Builder