Xmonad Contrab
1 CVEs
product
Monthly
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
RCE
Code Injection
Xmonad Contrab
NVD
Exploit-DB
CVSS 2.0
7.5
EPSS
8.2%
EPSS 8%
CVSS 7.5
HIGH
POC
PATCH
This Week
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
RCE
Code Injection
Xmonad Contrab
NVD
Exploit-DB