CVE-2026-44656

Summary: Vim before 9.2.0435 is affected by an OS command injection in the :find path-completion. If the path option contains backtick-enclosed shell commands, those commands execute during file-name completion. The issue arises because the path option lacks the P_SECURE flag and can be set from ...

EUVD-2000-0583

Malware in sbrugna...

CVE-2000-0587

The CVE-2000-0587 entry concerns glftpd 1.18, where the privpath directive permits remote attackers to bypass directory access restrictions by abusing filename completion. This constitutes a vulnerability in the directory traversal/access-control mechanism, allowing authorized-appearing access to...

CVE-2000-0587

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability...