26 matches found
CommandKit has incorrect command name exposure in context object for message command aliases
Impact A logic flaw exists in the message command handler of CommandKit that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value...
GHSA-FHWM-PC6R-4H2F CommandKit has incorrect command name exposure in context object for message command aliases
Impact A logic flaw exists in the message command handler of CommandKit that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value...
Use of Incorrectly-Resolved Name or Reference
Overview commandkit is a Beginner friendly command & event handler for Discord.js Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference due to the ctx.commandName property exposing the alias used instead of the canonical command name in both middleware...
EUVD-2017-9138
Malware in sbrugna...
CVE-2019-15714
cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations...
Centreon 2.3.1 - 'command_name' Remote Command Execution
source: https://www.securityfocus.com/bid/50568/info Centreon is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Centreon 2.3.1 is affected; other versions may also be vulnerable...