CVE-2025-32778

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11907 2025-04-15 21:21:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114344073080765410 2025-08-17 23:15:46+00:00| published-proof-of-concept|...

CVE-2025-32778

CVE-2025-32778 affects Web-Check’s /api/screenshot endpoint. A user-controlled url is passed to a shell command via exec(), enabling command injection that could lead to arbitrary commands on the host. The issue is mitigated by replacing exec() with execFile(), which avoids a shell and properly i...