Lucene search
+L

4 matches found

EUVD
EUVD
•added 2025/10/13 8:19 p.m.•16 views

EUVD-2025-34079

tracexec has env command argument injection via environment variables starting with dash in traced exec events...

6.9AI score
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2025/10/13 8:19 p.m.•12 views

GHSA-6FGX-X7M2-74QM tracexec has `env` command argument injection via environment variables starting with dash in traced exec events

Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause argument injection for the env command...

1CVSS7.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/10/13 8:19 p.m.•24 views

tracexec has `env` command argument injection via environment variables starting with dash in traced exec events

Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause argument injection for the env command...

7.4AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/13 12:00 a.m.•4 views

PT-2025-43577

Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause argument injection for the env command...

1CVSS6.1AI score
SaveExploits0References5
Rows per page
Query Builder