Everything RedTeam Monitor has reported about command injection: 5 stories, newest first. Part of our Vulnerabilities coverage.
Attackers with login access to specific TOTOLINK firmware can execute arbitrary code via a command injection vulnerability rated critical by the NVD.
A critical command injection flaw in the git-diff library for Node.js allows attackers to execute arbitrary system commands by manipulating diff inputs.
TRENDnet confirms a critical vulnerability in three legacy routers, stating it cannot test or fix the devices because they were discontinued in 2011.
A critical flaw in Tenable Identity Exposure allows low-privileged attackers to execute commands with SYSTEM-level access.
A critical command injection bug in the image_optimizer gem enables attackers to run system commands if they control file paths.