Everything RedTeam Monitor has reported about OS Command Injection: 6 stories, newest first. Part of our Vulnerabilities coverage.
A command injection flaw in older Komodo agents allows authenticated users to execute arbitrary root commands on servers, risking full infrastructure compromise.
A critical vulnerability in the pypdftk library allows attackers to execute operating system commands by injecting shell metacharacters into file path arguments.
A CVSS 8.5 flaw in the databases-on-aws plugin allowed attackers to run OS commands. Version 1.7.1 resolves the issue.
A critical vulnerability in the ppt2png Node.js library allows attackers to execute arbitrary system commands via unsanitized file paths.
A severe vulnerability in a popular Node.js image conversion library allows attackers to run arbitrary system commands on servers.
A critical command injection bug in the Dromara Skyeye monitoring tool allows remote attackers to execute arbitrary PowerShell code on Windows servers without a login.