-
When using pass-arguments-to-command you can inject arbitrary commands into the payload and they will be executed.
Hook definition:
```
- id: my_hook
execute-command: "/my_script.sh"
http-m…
-
## Issue
Current `package.json`:
```json
{
"scripts": {
"start": "tsx ./scripts/start.ts",
"test": "tsx ./scripts/test.ts",
"build": "tsx ./scripts/build.ts",
"type-check": "…
-
Entsprechende Zeile auskommentiert.
== Warnings ==
Confidence: High
Category: Command Injection
Check: Execute
Message: Possible command injection
Code: `bundle update --source #{ConcertoPlu…
-
**Command_Argument_Injection** issue exists @ **vulnerable/system.go** in branch **master**
*An argument is passed to an external OS command by CombinedOutput at vulnerable\system.go in line 9. Thi…
-
**Command_Argument_Injection** issue exists @ **server/router.go** in branch **master**
*An argument is passed to an external OS command by CombinedOutput at vulnerable\system.go in line 9. This co…
-
### Preliminary Checks
- [X] This issue is not a duplicate. Before opening a new issue, please search existing issues: https://github.com/gatsbyjs/gatsby/issues
- [X] This issue is not a question, fe…
-
### Template for?
CVE-2023-34992
### Details:
PoC
https://github.com/horizon3ai/CVE-2023-34992
https://www.horizon3.ai/attack-research/disclosures/cve-2023-34992-fortinet-fortisiem-co…
-
Removed
-
## Summary
It's a straight forward unauthenticated command injection vulnerability in a Fortinet product. Seems like it would be a good add to the framework.
I tried downloading a demo of the p…
-
# awkblogにおける、OSコマンドインジェクションの脆弱性
公開日: 2024/05/22
English: https://github.com/yammerjp/awkblog/issues/1#issuecomment-2128316538
gawkで実装されたWebアプリケーション awkblog の v0.0.1 において、第三者を含む外部からのHTTPリクエスト…