CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

smartctl 安全漏洞

smartctl is a command line application by Manuel B. Personal Developer. A security vulnerability exists in smartctl that stems from incorrect input cleanup, which can be exploited by an attacker to perform command injection via the info method...

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

CVE-2022-21810

The CVE-2022-21810 entry concerns the node package smartctl . The vulnerability is a command injection via the package’s info method caused by improper input sanitization. Affected software is the smartctl package (JavaScript/node module); impact is described as high (C, I, A all High) with local...

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

PT-2023-12672 · Smartctl · Smartctl

Name of the Vulnerable Software and Affected Versions: smartctl versions all Description: The issue is related to Command Injection via the info method due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated number of potentially...

CVE-2022-21810: Improper Neutralization of Special Elements used in an OS Command

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the info method due to improper input sanitization. PoC js const smartctl = require'smartctl'; smartctl.info';touch EXPLOITED;', function; Remediation There is no fixed version for smartctl. References - Vulnerable...