https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:47:01.851513+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-12904 CVE-2017-12904 2026-09-30T23:47:01.853903+00:00

Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.

 https://vulnerability.circl.lu/vuln/usn-4585-1 USN-4585-1 — newsbeuter vulnerabilities 2026-09-30T23:47:01.853992+00:00

Affected: Ubuntu:16.04:LTS: newsbeuter

It was discovered that Newsbeuter didn't handle the command line input properly. An remote attacker could use it to ran remote code by crafting a special input file. (CVE-2017-12904)

It was discovered that Newsbeuter didn't handle metacharacters in its filename properly. An remote attacker could use it to ran remote code by crafting a special filename. (CVE-2017-14500)