https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:14:33 +0000 https://cve.radiocsirt.org/vuln/cve-2018-6791 <p>An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it&#39;s interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is &#34;$(touch b)&#34; -- this will create a file called b in the home folder.</p> <p>An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it&#39;s interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is &#34;$(touch b)&#34; -- this will create a file called b in the home folder.</p> https://cve.radiocsirt.org/vuln/cve-2018-6791