Lucene search
+L

3 matches found

OSV
OSV
added 2021/11/30 10:15 a.m.18 views

CVE-2021-3727

Vulnerability in rand-quote and hitokoto plugins Description: the rand-quote and hitokoto fetch quotes from quotationspage.com and hitokoto.cn respectively, do some process on them and then use print -P to print them. If these quotes contained the proper symbols, they could trigger command...

9.8CVSS7.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/30 10:15 a.m.4 views

CVE-2021-3727

Vulnerability in rand-quote and hitokoto plugins Description: the rand-quote and hitokoto fetch quotes from quotationspage.com and hitokoto.cn respectively, do some process on them and then use print -P to print them. If these quotes contained the proper symbols, they could trigger command...

9.8CVSS7.3AI score0.01031EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.7 views

ohmyzsh 操作系统命令注入漏洞

ohmyzsh is an open source, community-driven framework for managing your zsh configuration. ohmyzsh suffers from an operating system command injection vulnerability that can be exploited by an attacker to trigger command injection via the rand-quote and hitokoto plugins...

9.8CVSS8.4AI score0.01031EPSS
SaveExploits0References2
Rows per page
Query Builder