K000130469: node.js systeminformation vulnerability CVE-2021-21315

Security Advisory Description The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Proble...

NodeJS System Information Library Command Injection (CVE-2021-21315)

Binary data nodejscve-2021-21315.nbin...

Node.JS System Information Command Injection (CVE-2021-21315)

A command injection vulnerability exists in Node.JS System Information. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Exploit for OS Command Injection in Systeminformation

the CVE-2021-21315's exploit code wrote with Rust lang I'm ru...

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315 Exploit - Des: My python Scri...

Security Bulletin: Vulnerabilities in Apache and Node.js affect IBM Spectrum Protect Plus

Summary Vulnerabilities in Apache and Node.js such as execution of arbitrary code on the system, cross -site scripting, and bypassing security restrictions, may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-28458 DESCRIPTION: Node.js datatables.net module could allow a...

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

CVE-2021-21315

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:59+00:00| seen| https://t.me/cibsecurity/23665 2021-02-24 12:16:02+00:00| published-proof-of-concept| https://t.me/BleepingComputer/9188 2021-03-04 15:23:07+00:00| published-proof-of-concept| https://t.me/antichat/9338 2021-10-28...

CVE-2021-21315

CVE-2021-21315 affects the npm package System Information (systeminformation) prior to version 5.3.1. The vulnerability is a command injection in functions that process service/latency queries (e.g., si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad()) which can be exploited via...