4 results · Feed
-
Unscored —
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demo…
-
Unscored —
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh …
-
Unscored —
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unp…
-
Unscored —
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local atta…