CVE-2026-29783

The CVE concerns GitHub Copilot CLI shell tool pre-0.0.423. Affected: Copilot CLI versions up to and including 0.0.422. Issue: the shell safety assessment misclassifies certain bash parameter expansion patterns as read-only, allowing arbitrary code execution when an attacker can influence the com...

KDE 4/5 KDesktopFile Command Injection Exploit

KDE 4/5 is vulnerable to a command injection vulnerability in the KDesktopFile class. When a .desktop or .directory file is instantiated, it unsafely evaluates environment variables and shell expansions using KConfigPrivate::expandString via the KConfigGroup::readEntry function. Using a specially...

GLSA-201405-03 : WeeChat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-03 WeeChat: Multiple vulnerabilities Two vulnerabilities have been discovered in WeeChat: The hookprocess function does not properly handle shell expansions CVE-2012-5534. WeeChat does not properly decode colors which could...