CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

Code injection

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

CVE-2020-8137 affects the blamer tool (versions 1.0.0 and earlier). The vulnerability is a code injection flaw caused by improper handling/filtration of externally supplied input during code segment construction (as described across multiple sources, including NVD, Red Hat, GHSA, OSV, CNVD, Verac...

Blamer Operating System Command Injection Vulnerability

Blamer is a tool for obtaining code author information from version control systems. An operating system command injection vulnerability exists in versions of Blamer prior to 1.0.1, which can be exploited by an attacker to inject arbitrary commands as part of the parameters provided to Burmer...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

Design/Logic Flaw

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

CVE-2019-10807

Blamer (software) is affected by an OS command injection vulnerability. In versions prior to 1.0.1, user-provided arguments to Blamer can be exploited to execute arbitrary commands on the system. The root cause is improper handling of input that enables injection via the command execution path. I...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

Command Injection

Overview blamer is a tool for get information about author of code from version control system. Supports git and subversion. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to blamer. PoC var Root...

Node.js third-party modules: [blamer] RCE via insecure command formatting

I would like to report a RCE issue in the blamer module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: blamer version: 0.1.13 npm page: https://www.npmjs.com/package/blamer Module Description Blamer is a tool for get information about author of code...