Lucene search
+L

686 matches found

Kitploit
Kitploit
added 2026/09/16 12:30 p.m.46 views

zi

...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:02 a.m.41 views

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 8:02 a.m.12 views

quiver

Quiver:Kali Linux用メタツール Quiverは、シェル関数の整理された名前空間であり、ターミナル内でコマンドを事前入力することで、メモ、コピー、貼り付け、編集、そして再びコピー&ペーストといった作業への依存から脱却できるようにします。Quiverは、あなたの武器庫にあるすべてのツールの使い方を覚える手助けをし、メンテナンスやアップデートが面倒なスクリプトの背後にツールを隠しません。代わりに、Quiverを使って、あらゆる状況に合わせて構成可能な即席のワークフローを構築できます。...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 1:50 a.m.75 views

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:31 a.m.11 views

CVE-2025-55616

CVE-2025-55616 作者:Rana M.Sinan Adil 在 Zsh 中发现可通过历史表达式实现 RCE 的漏洞 关键要点 运行此漏洞利用程序:只需更改 exploit 中的 IP 地址和 "p system" ,因为我也在我的第二台笔记本电脑上测试过,要在 gdb 中更改它(尤其是在 pwndbg 中),请运行以下命令: root@kitploit: $ gdb zsh -f 在终端中 pwndbg run -f username% ! username 将是你的用户名,只需输入 ! username% !!11111111111 这里也一样,只需输入...

6.1AI score
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zsh (UTSA-2026-061494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061494 advisory. In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because...

7.8CVSS7.4AI score0.0198EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in zsh

In Zsh before version 5.8, attackers who were able to execute commands could regain privileges lost due to the --no-PRIVILEGED option. Zsh failed to overwrite the saved user ID, so the original privileges could be restored by executing MODULEPATH=/dir/with/module zmodload with a module that calls...

7.8CVSS8.2AI score0.00495EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/18 3:16 p.m.10 views

CVE-2026-50187

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

8.8CVSS0.00494EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:09 p.m.35 views

CVE-2026-50187

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/18 3:09 p.m.29 views

CVE-2026-50187 Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

8.8CVSS0.00494EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/18 3:09 p.m.46 views

CVE-2026-50187

The dotenv plugin in plugins/dotenv/dotenv.plugin.zsh calls source on ZSH_DOTENV_FILE after cd into a directory containing a .env file, executing arbitrary shell commands with the user's privileges. Exploitation requires the user to navigate into a directory containing a malicious .env; no in-the...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 3:09 p.m.12 views

EUVD-2026-60954

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSHDOTENVFILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the fil...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-77142

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH DOTENV FILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/12 8:17 p.m.14 views

CVE-2026-73412

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

6.3CVSS0.00348EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/12 7:38 p.m.39 views

CVE-2026-73412

Shescape (JavaScript) prior to versions 2.1.14 and 3.0.1 is vulnerable on Unix when the shell is Zsh or the default shell is Zsh, affecting the escape and escapeAll functions. The issue is associated with Zsh options EXTENDED_GLOB and MAGIC_SUBST, enabling home-directory expansion or extended glo...

6.3CVSS5.3AI score0.00348EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/08/12 7:38 p.m.12 views

CVE-2026-73412

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

6.3CVSS5.3AI score0.00348EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/08/12 7:38 p.m.31 views

CVE-2026-73412 Shescape: Path disclosure on Unix with Zsh

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

6.3CVSS0.00348EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/12 7:38 p.m.15 views

CVE-2026-73412 Shescape: Path disclosure on Unix with Zsh

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

6.3CVSS5.4AI score
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2026/07/24 10:33 p.m.18 views

Shescape: Path disclosure on Unix with Zsh

Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST exacerbate the problem. In certain case, an attacker can leverage home directory...

6.3CVSS5.8AI score0.00348EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/07/24 10:33 p.m.12 views

GHSA-6V4M-FW66-8R4X Shescape: Path disclosure on Unix with Zsh

Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST exacerbate the problem. In certain case, an attacker can leverage home directory...

6.3CVSS5.8AI score0.00348EPSS
SaveExploits0References9
Rows per page
Query Builder