egg-scripts-CVE-2018-3786

egg-scripts deploy tool for egg project. Note: Windows is partially supported, see22 Install $ npm i egg-scripts --save Usage Add eggctl to package.json scripts: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Then run as: npm start npm stop Note: egg-scripts is not recommended...

EUVD-2018-0451

Malicious code in bioql PyPI...

@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +4 more potentially affected by CVE-2018-3786 via egg-scripts (2.6.0)

egg-scripts NPM version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on egg-scripts and may be impacted: - @taotieh/backgiscom 1.0.7 - @taotieh/backgiscomsample =0.1.2, =0.2.0, =0.1.2, =0.1.9 - @taotieh/backgiscomtiletransform 0.0.0 Source cves:...

Command Injection in egg-scripts

Versions of egg-scripts before 2.8.1 are vulnerable to command injection. This is only exploitable if a malicious argument is provided on the command line. Example: eggctl start --daemon --stderr='/tmp/eggctlstderr.log; touch /tmp/malicious' Recommendation Update to version 2.8.1 or later...

GHSA-C9J3-WQPH-5XX9 Command Injection in egg-scripts

Versions of egg-scripts before 2.8.1 are vulnerable to command injection. This is only exploitable if a malicious argument is provided on the command line. Example: eggctl start --daemon --stderr='/tmp/eggctlstderr.log; touch /tmp/malicious' Recommendation Update to version 2.8.1 or later...

@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +4 more potentially affected by CVE-2018-3786 via egg-scripts (2.6.0)

egg-scripts NPM version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on egg-scripts and may be impacted: - @taotieh/backgiscom 1.0.7 - @taotieh/backgiscomsample =0.1.2, =0.2.0, =0.1.2, =0.1.9 - @taotieh/backgiscomtiletransform 0.0.0 Source cves:...

egg-scripts command injection vulnerability

egg-scripts is a deployment tool for deploying, running and managing egg projects. A command injection vulnerability exists in egg-scripts versions prior to 2.8.1. The vulnerability can be exploited to execute arbitrary shell commands with the help of maliciously crafted command line arguments...

Command injection

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...

CVE-2018-3786

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...

CVE-2018-3786

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...

@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +6 more potentially affected by CVE-2018-3786 via egg-scripts (>=1.2.0, <=2.6.0)

egg-scripts NPM version =1.2.0, =0.1.2, =0.2.0, =0.1.2, =1.0.0, =0.0.1, =1.0.2 Source cves: CVE-2018-3786 Source advisory: MEND:CVE-2018-3786...

CVE-2018-3786

CVE-2018-3786 affects egg-scripts prior to 2.8.1. A crafted command line argument enables command injection, allowing arbitrary shell command execution. Impact, per sources, is remote code execution in affected setups; exploitability is via untrusted input passed to egg-scripts. Remediation: upgr...

CVE-2018-3786

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...

Command Injection

Overview Versions of egg-scripts before 2.8.1 are vulnerable to command injection. This is only exploitable if a malicious argument is provided on the command line. Example: eggctl start --daemon --stderr='/tmp/eggctlstderr.log; touch /tmp/malicious' Recommendation Update to version 2.8.1 or late...

CVE-2018-3786: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in egg-scripts...

PT-2018-16203 · Egg · Egg-Scripts

Name of the Vulnerable Software and Affected Versions: egg-scripts versions prior to 2.8.1 Description: A command injection issue allows arbitrary shell command execution through a maliciously crafted command line argument. This is only exploitable if a malicious argument is provided on the comma...

Node.js third-party modules: [egg-scripts] Command injection

I would like to report a command injection vulnerability in egg-scripts. It allows arbitrary shell command execution through a maliciously crafted command line argument. Module module name: egg-scripts version: 2.6.0 npm page: https://www.npmjs.com/package/egg-scripts Module Description "deploy...