Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2025/12/30 11:45 p.m.11 views

theshit vulnerable to unsafe loading of user-owned Python rules when running as root

Impact Vulnerability Type: Local Privilege Escalation LPE / Arbitrary Code Execution. The application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when executed with elevated privileges. If the...

6.7CVSS7.4AI score0.00122EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder