What happened
Shellshock RCE in Bash 1.0.3-4.3 via environment variable injection.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 35081Binary File Descriptor Library (libbfd) - Out-of-Bounds CrashMichal Zalewski2014-10-27VerifiedExploit-DB 36933dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)fdiskyou2014-09-29VerifiedExploit-DB 34860GNU bash 4.3.11 - Environment Variable dhclient@0x00string2014-10-02VerifiedSploitusShellshock RCE in Bash 1.0.3-4.3 via environment variable injection.KitPloit2026-09-28T18:16:29Candidatekitploit.comShellshock RCE in Bash 1.0.3-4.3 via environment variable injection.zh2026-09-28T18:16:29CandidateSploitusRCE in GNU Bash ≤ 4.3 via crafted environment variables enabling remote shell access (Shellshock).KitPloit2026-10-04T19:07:34Candidatekitploit.comRCE in GNU Bash ≤ 4.3 via crafted environment variables enabling remote shell access (Shellshock).ru2026-10-04T19:07:34CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.