TurboBoost Commands vulnerable to arbitrary method invocation

Impact TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should be. It's possible for a sophisticated attacker to invoke more methods than should be permitted dependi...

TurboBoost Commands Injection Vulnerability

TurboBoost Commands is a reactive application development tool. An injection vulnerability exists in TurboBoost Commands prior to 0.1.3 and prior to 0.2.2, which stems from existing security checks that are not robust enough to prevent all code execution...