Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:20:44 +0000 cnvd-2022-08228 https://cve.radiocsirt.org/vuln/cnvd-2022-08228 cnvd-2022-08228 https://cve.radiocsirt.org/vuln/cnvd-2022-08228 EUVD-2026-32181 https://cve.radiocsirt.org/vuln/euvd-2026-32181 EUVD-2026-32181 https://cve.radiocsirt.org/vuln/euvd-2026-32181 fkie_cve-2021-42561 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42561 <p>An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python &#34;os.system&#34; function. This allows attackers to use shell metacharacters (e.g., backticks &#34;``&#34; or dollar parenthesis &#34;$()&#34; ) in order to escape the current command and execute arbitrary shell commands.</p> <p>An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python &#34;os.system&#34; function. This allows attackers to use shell metacharacters (e.g., backticks &#34;``&#34; or dollar parenthesis &#34;$()&#34; ) in order to escape the current command and execute arbitrary shell commands.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42561 GHSA-3893-j6q6-whq8 https://cve.radiocsirt.org/vuln/ghsa-3893-j6q6-whq8 <p>An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python &#34;os.system&#34; function. This allows attackers to use shell metacharacters (e.g., backticks &#34;``&#34; or dollar parenthesis &#34;$()&#34; ) in order to escape the current command and execute arbitrary shell commands.</p> <p>An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python &#34;os.system&#34; function. This allows attackers to use shell metacharacters (e.g., backticks &#34;``&#34; or dollar parenthesis &#34;$()&#34; ) in order to escape the current command and execute arbitrary shell commands.</p> https://cve.radiocsirt.org/vuln/ghsa-3893-j6q6-whq8 gsd-2021-42561 https://cve.radiocsirt.org/vuln/gsd-2021-42561 gsd-2021-42561 https://cve.radiocsirt.org/vuln/gsd-2021-42561