neurobin shc Command Execution Vulnerability in Filename Handler
Vulnerability
A command injection vulnerability has been identified in neurobin shc versions through 4.0.3. The issue arises in the Filename Handler component, specifically within the 'make' function of 'src/shc.c'. This vulnerability allows local execution of arbitrary operating system commands by manipulating the file name input, which is improperly validated before being passed to the 'system' function for execution.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the host system.
Added: Aug 19, 2025, 11:18 PM
Updated: Aug 19, 2025, 11:18 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.6remediation
0.0relevance
0.4threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.