Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the windnsrecord resource. An attacker can execute arbitrary commands on the underlying system by injecting malicious inputs into the PowerShell command prompt used by the application. Remediation Upgrade...

PT-2021-17988

Name of the Vulnerable Software and Affected Versions: libretro RetroArch for Windows version 1.9.0 Description: The issue allows attackers with write access to filesystems used by the software to execute code via command injection. This is achieved by passing unsanitized input to PowerShell...