PT-2024-8536

Name of the Vulnerable Software and Affected Versions Modules::ScanDeps versions prior to 1.36 Description The issue is related to the Modules::ScanDeps library, which does not properly sanitize input. This can allow an attacker to execute arbitrary shell commands. A local attacker could exploit...

CVE-2024-10224: Improper Neutralization of Special Elements used in an OS Command

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...