Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2026/03/04 1:56 a.m.•15 views

CVE-2026-21882

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/02 7:17 p.m.•40 views

CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/02 7:17 p.m.•21 views

EUVD-2026-9256

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/02 7:17 p.m.•7 views

CVE-2026-21882

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/03/02 7:17 p.m.•56 views

CVE-2026-21882

CVE-2026-21882 affects theshit, a command-line utility that detects and fixes shell command mistakes. In versions prior to 0.2.0, improper privilege dropping enables local privilege escalation via command re-execution. The issue is demonstrated as a local attack with high impact on confidentialit...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/02 7:17 p.m.•14 views

CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/02 7:17 p.m.•6 views

CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•28 views

PT-2026-22690

Name of the Vulnerable Software and Affected Versions theshit versions prior to 0.2.0 Description theshit is a command-line utility designed to detect and correct common errors in shell commands. A flaw in privilege handling prior to version 0.2.0 allows for local privilege escalation through...

8.4CVSS5.9AI score0.0018EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•1 views

CVE-2026-21882: Improper Check for Dropped Privileges

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0...

8.4CVSS5.7AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/31 8:00 p.m.•9 views

CVE-2025-69257

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS7.5AI score0.00134EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/30 8:16 p.m.•23 views

CVE-2025-69257

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS0.00134EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/30 7:15 p.m.•48 views

CVE-2025-69257

CVE-2025-69257 (theshit) is a local privilege escalation vulnerability in the command-line tool that loads Python rules/configs from user-writable locations (e.g., ~/.config/theshit/) without validating ownership/permissions when executed with elevated privileges. If invoked with sudo or EUID=0, ...

6.7CVSS6AI score0.00134EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/30 7:15 p.m.•4 views

CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS7.2AI score0.00134EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/30 7:15 p.m.•43 views

CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS0.00134EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•3 views

CVE-2025-69257: Improper Privilege Management

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS6AI score0.00134EPSS
SaveExploits0References1
Rows per page
Query Builder