https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:39:50.212718+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22035 CVE-2026-22035 — Greenshot Vulnerable to OS Command Injection via ExternalCommand Plugin 2026-10-08T14:39:50.213892+00:00

Affected: greenshot

Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format() to insert user-controlled filenames directly into shell commands without sanitization, allowing attackers to execute arbitrary commands by crafting malicious filenames containing shell metacharacters. This issue is fixed in version 1.3.311.