Command and Code Injection

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. ShellShock - Remote Code ExecutionCVE-2014-6271GNU · CVSS 9.8 · 100% likely

   CWE-781 bounty report

2. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wr…CVE-2014-7169GNU · CVSS 9.8 · 100% likely

   CWE-78

3. GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands vi…CVE-2014-6278GNU · CVSS 8.8 · 100% likelycovered by CyberSIXT

   CWE-781 article

4. telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.CVE-2026-24061GNU · CVSS 9.8 · 99% likelycovered by CyberSIXT

   CWE-881 article1 article this week: PRODAFT uncovers BBNet Linux botnet with 11 exploits

5. GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cau…CVE-2014-6277Gnu · 64% likely

   CWE-78

6. encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact…CVE-2021-26937Gnu · 9.3% likely

   CWE-88

7. Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers…CVE-2011-2702Gnu · 8.5% likely

   CWE-94

8. The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v…CVE-2014-8485Gnu · 7.5% likely

   CWE-94

9. The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.CVE-2016-0634Gnu · 6.0% likely

   CWE-78

10. GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacha…CVE-2019-13638Gnu · 4.5% likely

    CWE-78

11. The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attac…CVE-2014-4043Gnu · 3.9% likely

    CWE-94

12. CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting m…CVE-2006-4624Gnu · 3.0% likely

    CWE-94

13. do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is spec…CVE-2018-20969Gnu · 2.7% likely

    CWE-78

14. An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file fun…CVE-2022-48338Gnu · CVSS 7.3 · 1.6% likely

    CWE-77

15. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function…CVE-2022-48337Gnu · CVSS 9.8 · 1.6% likely

    CWE-78

16. In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Or…CVE-2024-39331Gnu · CVSS 9.8 · 1.3% likely

    CWE-94

17. In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.CVE-2024-30202Gnu · CVSS 7.8 · 1.1% likely

    CWE-94

18. emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop…CVE-2023-27985Gnu · CVSS 7.8 · 1.1% likely

    CWE-78

19. An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component.CVE-2024-29399Gnu · CVSS 7.6 · 0.9% likely

    CWE-94

20. The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.CVE-1999-0491Gnu · 0.9% likely

    CWE-94

21. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function…CVE-2022-45939Gnu · CVSS 7.8 · 0.7% likely

    CWE-78

22. GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metach…CVE-2025-43920GNU · CVSS 5.4 · 0.6% likely

    CWE-78

23. In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp…CVE-2024-53920Gnu · CVSS 7.8 · 0.6% likely

    CWE-94

24. emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed i…CVE-2023-27986Gnu · CVSS 7.8 · 0.5% likely

    CWE-94

25. org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell…CVE-2023-28617Gnu · CVSS 7.8 · 0.5% likely

    CWE-78

26. A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command…CVE-2023-2491Gnu · CVSS 7.8 · 0.5% likely

    CWE-77

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.