EUVD-2023-0452

Malicious code in bioql PyPI...

CVE-2022-25923

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization...

Command Injection

exec-local-bin is vulnerable to Command Injection attacks. The library does not properly sanitize user-input via theProcess function, which allows an attacker to inject and execute malicious commands...

exec-local-bin vulnerable to Command Injection

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization...

CVE-2022-25923

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization...

CVE-2022-25923

CVE-2022-25923 affects the exec-local-bin package. The vulnerability arises in theProcess() where improper user-input sanitization enables Command Injection. Affected versions are prior to 1.2.0. Impact is described as potential unauthorized code execution with high confidentiality/integrity/avai...

exec-local-bin 安全漏洞

exec-local-bin is a library by Saeed Seyfi Dorcheh personal developer. A simple helper for executing a local nodemodule bin in a node. A security vulnerability exists in exec-local-bin versions prior to 1.2.0, which stems from incorrect user input cleanup and is prone to command injection via...

CVE-2022-25923: Improper Neutralization of Special Elements used in an OS Command

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization...

PT-2023-12836 · Unknown · Exec-Local-Bin

Name of the Vulnerable Software and Affected Versions: exec-local-bin versions prior to 1.2.0 Description: The issue is related to Command Injection via the theProcess functionality due to improper user-input sanitization. This allows for potential exploitation. No information is provided about t...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization. PoC js var root = require"exec-local-bin" root"& touch JHU", Remediation Upgrade exec-local-bin to version 1.2.0 or higher. References - GitHub...