Approved changes feed: RSS · Atom
cpe:2.3:a:neurobin:shc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Neurobin (9fc6a0bc-042b-5280-985e-9bb9a3114d7f) |
|---|---|
| Product | Shc (527c2009-589c-5d8e-8f6a-d1dbd830d9e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/shc |
purl2cpe | 2026-06-01 10:15:12.487707 |
pkg:github/neurobin/shc |
purl2cpe | 2026-06-01 10:15:12.487710 |
pkg:rpm/fedora/shc |
purl2cpe | 2026-06-01 10:15:12.487713 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9176 |
vulnerable | 2026-06-08 07:45:21.839737 |
neurobin shc Environment Variable shc.c make os command injection
MEDIUM (5.3)
A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Published: 2025-08-19T23:32:07.022Z
Updated: 2025-08-20T15:15:58.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9175 |
vulnerable | 2026-06-08 07:45:21.839250 |
neurobin shc shc.c make stack-based overflow
MEDIUM (5.3)
A vulnerability was identified in neurobin shc up to 4.0.3. This issue affects the function make of the file src/shc.c. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used.
Published: 2025-08-19T23:02:07.237Z
Updated: 2025-08-20T15:16:07.288Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9174 |
vulnerable | 2026-06-08 07:45:21.838832 |
neurobin shc Filename shc.c make os command injection
MEDIUM (5.3)
A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src/shc.c of the component Filename Handler. Executing manipulation can lead to os command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized.
Published: 2025-08-19T22:32:08.348Z
Updated: 2025-08-20T15:16:13.619Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.