Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/09/14 6:16 p.m.10 views

linux_mint_poc

Linux Mint 18.3-19.1 'yelp' 命令注入漏洞 根本原因 URI 处理器 help://、ghelp:// 和 man:// 定义在文件 /usr/share/applications/yelp.desktop 中,当这些 URI 处理器中的任何一个被调用时,该文件将通过 Exec=yelp %u 执行 /usr/local/bin/yelp。 文件 /usr/local/bin/yelp 是一个简单的 python 脚本,用于解析传入的 URI 处理器请求。该脚本首先搜索子字符串 "gnome-help" 和 "ubuntu-help"...

6.1AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-15432

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00484EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/17 11:15 p.m.8 views

CVE-2022-0237

Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the iragent.exe component, resulting in elevated rights and persistent access to t...

7.8CVSS7.2AI score0.00484EPSS
SaveExploits1References2
OSV
OSV
added 2007/01/23 12:28 a.m.11 views

CVE-2007-0404

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...

7.2AI score
SaveExploits0References5
Rows per page
Query Builder