dizqueTV Unauthenticated Remote Code Execution

dizqueTV, a Node.js-based IPTV streaming server, is vulnerable to unauthenticated remote code execution via the ffmpegPath configuration parameter. On Linux, an attacker can inject a command into the ffmpegPath value. On Windows, an attacker can upload a malicious batch script through the image...