-
I assumed mkdir should not be able to create directories with invalid characters that
allow for command injections. This was not specified by the project description so it
is my assumption.
Mkdir d…
-
Due to the using of `/bin/sh -c` blablabla... it can execute an arbitrary command with forged 'input'.
i.e.
```javascript
const qpdf = require('node-qpdf');
qpdf.decrypt('/the/path/of/filename.…
-
When googling for "PHPThumb", one of the suggested searches is "PHPThumb exploit". One of the results links to this:
http://www.securityfocus.com/bid/39605/exploit
> Attackers can exploit this issu…
-
[This exploit](http://pivotal.io/security/cve-2016-6655) exists in this project. We've highlighted the affected lines
[Details in this report](https://docs.google.com/document/d/1MOJPOR_fNjvhu2zc…
-
**What would you like to happen?**
- [ ] Add additional techniques for command injection
- [ ] Tabularise languages and their possible command exec APIs
- [ ] General refactor and format touchup
-
The suggestion from `CommandLiteralInjection` isn't great, just switching from the backtick method to `system` does not make what ever you are doing safe. https://ruby-doc.org/3.3.0/command_injection_…
-
When having both Paraglide and Sveltekit installed I'm getting this build error. Have anyone experienced anything similar or know why it might happening? It happens both when building locally and in p…
-
There are several command injection vulnerabilities in Gitly:
https://github.com/vlang/gitly/blob/d0e1f3ad2fa3d76306a3de11642f5ff50e9e9ede/src/repo_routes.v#L530-L543
https://github.com/vlang/gi…
-
### What happened?
Hi,
I am trying to deploy NewRelic nri-bundle using Kustomize+Helm Charts instead of Kustomize+manifests. When I try to use Kustomize with Helm, the output from kustomize buil…
-
能否升级一下nodemailer, 并将request替换成axios,
Command injection in nodemailer
tough-cookie Prototype Pollution vulnerability