Pardus Os My Computer
Monthly
OS command injection in Pardus OS "My Computer" (versions up to and including 0.7.5, fixed in 0.8.0) lets an attacker execute arbitrary operating-system commands when a victim interacts with attacker-controlled input, inheriting the privileges of the file-manager process. Reported by Turkey's national CERT (TR-CERT) with a vendor patch available; there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.10%).
OS command injection in Pardus OS "My Computer" (versions up to and including 0.7.5, fixed in 0.8.0) lets an attacker execute arbitrary operating-system commands when a victim interacts with attacker-controlled input, inheriting the privileges of the file-manager process. Reported by Turkey's national CERT (TR-CERT) with a vendor patch available; there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.10%).