CVE-2021-21315-PoC

CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...

CVE-2021-21315-exploit

CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

ROOT-APP-NPM-CVE-2026-26280 CVE-2026-26280 in systeminformation - Patched by Root

Root has patched CVE-2026-26280 in the systeminformation package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-50289 CVE-2026-50289 in systeminformation - Patched by Root

Root has patched CVE-2026-50289 in the systeminformation package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26318 CVE-2026-26318 in systeminformation - Patched by Root

Root has patched CVE-2026-26318 in the systeminformation package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-68154 CVE-2025-68154 in systeminformation - Patched by Root

Root has patched CVE-2025-68154 in the systeminformation package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44724 CVE-2026-44724 in systeminformation - Patched by Root

Root has patched CVE-2026-44724 in the systeminformation package for Root:npm. Multiple fixed versions available...

CLSA-2026-1790004555 TuxCare security update for systeminformation (1 CVE)

TuxCare rebuilt systeminformation to address 1 CVE. Fixed in 5.23.8-tuxcare.2...

PT-2026-105280

TuxCare rebuilt systeminformation to address 1 CVE. Fixed in 5.23.8-tuxcare.2...

CLSA-2026-1788560453 TuxCare security update for systeminformation (4 CVEs)

TuxCare rebuilt systeminformation to address 4 CVEs. Fixed in 5.23.8-tuxcare.1...

PT-2026-91821

TuxCare rebuilt systeminformation to address 4 CVEs. Fixed in 5.23.8-tuxcare.1...

SUSE CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289: Improper Neutralization of Special Elements used in an OS Command

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +417 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.26.4, =0.1.1, =0.1.1, =4.1.0-rc.4, =5.2.0-revision.1, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =2.2.0 - @anticapture/observability 1.0.1 and more Source cves:...

Command Injection

Overview systeminformation is a simple system and OS information library. Affected versions of this package are vulnerable to Command Injection through the checkLinuxDCHPInterfaces function in lib/network.js. An attacker can execute arbitrary commands by supplying a malicious source path in a Lin...