EUVD-2015-0942

Malware in sbrugna...

CVE-2015-0934

CVE-2015-0934 affects ShareLaTeX via CLSI before 0.1.3. The vulnerability arises from backtick characters in filenames, allowing remote authenticated users to execute arbitrary commands on the server (command injection). CLSI 0.1.3 fixes the issue and is included in ShareLaTeX 0.1.3; upgrade to t...

CVE-2015-0934: Improper Neutralization of Special Elements used in a Command

Common LaTeX Service Interface CLSI before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via backtick characters in a filename...