linux_mint_poc

Linux Mint 18.3-19.1 'yelp' 命令注入漏洞 根本原因 URI 处理器 help://、ghelp:// 和 man:// 定义在文件 /usr/share/applications/yelp.desktop 中，当这些 URI 处理器中的任何一个被调用时，该文件将通过 Exec=yelp %u 执行 /usr/local/bin/yelp。 文件 /usr/local/bin/yelp 是一个简单的 python 脚本，用于解析传入的 URI 处理器请求。该脚本首先搜索子字符串 "gnome-help" 和 "ubuntu-help"...

EUVD-2022-15432

Malicious code in bioql PyPI...

CVE-2022-0237

Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the iragent.exe component, resulting in elevated rights and persistent access to t...

CVE-2007-0404

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...