EUVD-2022-6542

Malicious code in bioql PyPI...

Command Injection

curljs is vulnerable to command injection. The vulnerability exists due to a lack of sanitization of the input argument allowing an attacker to inject maliciously crafted OS command into the system...

ca-reservoir-status (=1.0.0) potentially affected by CVE-2020-28425 via curljs (=0.1.2)

curljs NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on curljs and may be impacted: - ca-reservoir-status =1.0.0 Source cves: CVE-2020-28425 Source advisory: OSV:GHSA-CQFC-9452-R36J...

curljs Command Injection vulnerability

A command injection vulnerability affects all versions of the package curljs...

GHSA-CQFC-9452-R36J curljs Command Injection vulnerability

A command injection vulnerability affects all versions of the package curljs...

CVE-2020-28425

This affects all versions of package curljs...

Command injection

This affects all versions of package curljs...

CVE-2020-28425

Curljs is affected by a Command Injection vulnerability that affects all versions. The root cause is lack of input sanitization, allowing an attacker-supplied argument to inject OS commands. Reported exploit evidence includes a PoC showing arbitrary command execution, and multiple sources confirm...

CVE-2020-28425 Command Injection

This affects all versions of package curljs...

curljs 命令注入漏洞

curljs is a Node.js library that wraps curl functionality. A command injection vulnerability exists in all versions of curljs, which stems from the presence of command injection...

PT-2022-8888 · Curljs · Curljs

Name of the Vulnerable Software and Affected Versions: curljs affected versions not specified Description: A command injection issue affects the package. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this...

ca-reservoir-status (=1.0.0) potentially affected by CVE-2020-28425 via curljs (=0.1.2)

curljs NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on curljs and may be impacted: - ca-reservoir-status =1.0.0 Source cves: CVE-2020-28425 Source advisory: SNYK:JS-CURLJS-1050404...

Command Injection

Overview curljs is a package that wraps the functionality of curl into an easy to use node module Affected versions of this package are vulnerable to Command Injection. PoC var a=require"curljs"; a"' & touch JHU '" Remediation There is no fixed version for curljs. Credit: JHU System Security Lab...