CVE-2026-113725 virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...

CVE-2026-113725

The virtualenv tool, used for creating isolated Python environments, is vulnerable to command injection in versions prior to 21.14.7 . The root cause lies in the bash activate script , which fails to properly escape the environment name during one of the two passes bash makes over PS1 . Specifica...

CVE-2026-113725 virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient escaping of the VIRTUALENVPROMPT variable in activate.sh, which allows an attacker who controls the virtual environment prompt string to inject arbitrary shell code. When the activation script...

CVE-2026-113722 virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...

CVE-2026-113722

The virtualenv tool (prior to version 21.14.9 ) is vulnerable to OS Command Injection (CWE-78) during the generation of POSIX console scripts. The issue occurs because ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker . When a destination path contains ...

CVE-2026-113722 virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...

Exploit for CVE-2025-5243

CVE-2025-5243 — SMG Software Information Portal Arbitrary File...

CVE-2026-86471

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

WordPress WP Mailster arbitrary file upload vulnerability

WordPress WP Mailster versions 1.9.1.0 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from the lack of restrictions on uploading files of malicious types, potentially allowing attackers to upload web shells to the web server...

CVE-2026-86471 Apache CouchDB: Admin credentials leading to code execution as operating system user

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

CVE-2026-86471

Apache CouchDB versions 3.5.2 and below are vulnerable to a security flaw caused by an unvalidated runtime configuration value . This allows a CouchDB server admin to execute arbitrary shell commands as the CouchDB operating system user across all platforms. To remediate this issue, users are rec...

CVE-2026-86471 Apache CouchDB: Admin credentials leading to code execution as operating system user

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

EUVD-2026-105155

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

CVE-2026-86471

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

rea-phplist-poc

rea-phplist-poc Authorized pentest proof-of-concept for the p...

CVE-2026-34485

Nokia 1830 Global Express GX is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is no...

CVE-2026-34484

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

MSC-2026-12986

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MSC-2026-12958

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...