WS-2022-0246

A global overflow vulnerability was discovered in pppdump 2.4.9. Specifically, when the -p flag is given for enabling the pppmodeon the pppdump command, a malicious crafted pppdump file can trigger a global overflow, which may lead to a Remote Code Execution RCE on the victim side by running...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the ValidateStdioConfig process. An attacker can execute arbitrary commands with application privileges by bypassing argument validation using the -p flag in npx node. This allows full system compromise through...