CVE-2025-9174

The CVE describes a local OS command-injection in neurobin shc ≤ 4.0.3, caused by unsafe handling in the make function of src/shc.c (Filename Handler). Public exploit details indicate local access is required; exploitation has been disclosed. Impact includes potential compromise of confidentialit...

CVE-2025-9176

CVE-2025-9176 affects neurobin shc up to version 4.0.3. The vulnerability is in the Environment Variable Handler, specifically the make function in src/shc.c, enabling local OS command injection. Exploitation requires local access, and public exploits/ PoC are mentioned in multiple sources. Remed...

CVE-2025-9175

CVE-2025-9175 affects neurobin shc up to version 4.0.3. The vulnerability is in the make() function of src/shc.c, causing a stack-based buffer overflow that can be triggered locally. Public exploit appears to be available. Several sources corroborate a local-exploitation scenario with varying imp...