PT-2025-33884

CVE-2025-9174

Published

2025-08-19

Updated

2025-09-15

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: neurobin shc versions prior to 4.0.4

Description: A vulnerability exists in neurobin shc up to version 4.0.3. This issue affects the make function within the src/shc.c file of the Filename Handler component. Manipulation of this function can lead to OS command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized.

Recommendations: Update neurobin shc to version 4.0.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers