Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.5 views

CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS5.9AI score0.00243EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-44465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonit...

8.6CVSS6.1AI score0.00243EPSS
Exploits1References2
NVD
NVD
added 2026/05/28 5:16 p.m.9 views

CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS0.00243EPSS
Exploits1References1
OSV
OSV
added 2026/05/28 5:16 p.m.6 views

UBUNTU-CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS6.1AI score0.00243EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/05/28 4:10 p.m.25 views

CVE-2026-44465 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS0.00243EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 4:10 p.m.5 views

CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS6.1AI score0.00243EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/05/28 4:10 p.m.11 views

CVE-2026-44465

Zed IDE (prior to 0.227.1) is affected. Opening a folder that contains a malicious .git/config file abuses the core.fsmonitor Git configuration option, allowing an attacker to execute arbitrary commands and achieve Remote Code Execution when a user opens the folder in untrusted mode. The issue is...

8.6CVSS6.1AI score0.00243EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.7 views

Zed 安全漏洞

Zed is a code editor developed by Zed Industries. Versions of Zed prior to 0.227.1 contained a security vulnerability. This vulnerability stemmed from the abuse of the core.fsmonitor Git configuration option when opening folders containing malicious.git/config files. This allowed attackers to...

8.6CVSS6.2AI score0.00243EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2026/05/20 3:30 p.m.9 views

RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

RTK Rust Token Killer improperly trusts project-local configuration files. In versions prior to 0.32.0, RTK automatically loads .rtk/filters.toml from the working directory with highest priority and without user notification. An attacker can place a malicious filter file in a repository to apply...

5.8AI score0.00009EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.8 views

PT-2026-42204

RTK Rust Token Killer improperly trusts project-local configuration files. In versions prior to 0.32.0, RTK automatically loads .rtk/filters.toml from the working directory with highest priority and without user notification. An attacker can place a malicious filter file in a repository to apply...

6.9CVSS5.8AI score0.00009EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/02/13 12:0 a.m.4 views

Apache Avro Java SDK 安全漏洞

The Apache Avro Java SDK is a data processing toolkit developed by the Apache Foundation. Versions of the Apache Avro Java SDK prior to 1.11.4 and 1.12.0 have security vulnerabilities. These vulnerabilities stem from improper control over the generation of specific record schema code from the...

7.3CVSS7.3AI score0.00602EPSS
Exploits0References4
Rows per page
Query Builder