Lucene search
+L

24 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/23 12:00 a.m.•12 views

UBUNTU-CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arb...

7.8CVSS6.1AI score0.00222EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/10/23 12:00 a.m.•11 views

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arb...

7.8CVSS6.1AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-95168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in...

7.8CVSS6.8AI score0.00222EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/20 5:51 p.m.•10 views

CVE-2026-95168

A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...

7.8CVSS6.9AI score0.00222EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/10/20 3:17 p.m.•11 views

DEBIAN-CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

7.8CVSS6.7AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 3:17 p.m.•10 views

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

7.8CVSS0.00222EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 12:00 a.m.•24 views

CVE-2026-95168

The utility nvbn thefuck v.3.32 is vulnerable to arbitrary code execution due to insecure import path resolution. A local attacker can supply malicious rule files, which the application evaluates from untrusted paths during loading. This flaw originates from the get_rules_import_paths function in...

7.8CVSS6.7AI score0.00222EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 12:00 a.m.•20 views

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

0.00222EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 12:00 a.m.•8 views

EUVD-2026-105081

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

6.7AI score0.00222EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/20 12:00 a.m.•8 views

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

7.8CVSS6.7AI score0.00222EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•11 views

PT-2026-118415

Name of the Vulnerable Software and Affected Versions nvbn thefuck version 3.32 Description A local attacker can execute arbitrary code through the get rules import paths function in thefuck/corrector.py and the Rule.from path function in thefuck/types.py. Recommendations At the moment, there is ...

7.8CVSS6.5AI score0.00222EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2021-34363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...

9.1CVSS8.1AI score0.01847EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/01/20 12:00 a.m.•18 views

Fedora: Security Advisory for thefuck (FEDORA-2022-0f1653e269)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.1CVSS9.4AI score0.01847EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/01/19 1:54 a.m.•47 views

[SECURITY] Fedora 34 Update: thefuck-3.32-1.fc34

This application corrects your previous console command. If you use BASH, you should add these lines to your .bashrc: alias fuck=3D'eval $thefuck $fc -ln -1; history -r' alias FUCK=3D'fuck' For other shells please check /usr/share/doc/thefuck/README.md...

9.1CVSS0.9AI score0.01847EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•27 views

TheFuck Path Traversal

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

9.1CVSS7.7AI score0.01847EPSS
SaveExploits0References5Affected Software2
ArchLinux
ArchLinux
•added 2021/06/15 12:00 a.m.•168 views

[ASA-202106-39] thefuck: arbitrary file overwrite

Arch Linux Security Advisory ASA-202106-39 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-34363 Package : thefuck Type : arbitrary file overwrite Remote : No Link : https://security.archlinux.org/AVG-2062 Summary ======= The package thefuck before...

9.1CVSS1.1AI score0.01847EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/06/11 12:00 a.m.•61 views

thefuck path traversal vulnerability

thefuck is an open source application. Corrects errors in previous console commands. A path traversal vulnerability exists in thefuck, which can be exploited to arbitrarily delete files via the "undo archive operation" feature...

9.1CVSS6.5AI score0.01847EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2021/06/10 11:15 a.m.•11 views

DEBIAN-CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS8.5AI score0.01847EPSS
SaveExploits0References1
PyPA
PyPA
•added 2021/06/10 11:15 a.m.•17 views

PYSEC-2021-97

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS7.1AI score0.01847EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/06/10 11:15 a.m.•31 views

UBUNTU-CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS5.9AI score0.01847EPSS
SaveExploits0References7
Rows per page
Query Builder