GHSA-63M4-FHF2-CMF7 Command Execution in windows-cpu

Version of windows-cpu before 0.1.5 will execute arbitrary code passed into the first argument of the findLoad method, resulting in remote code execution. Proof of Concept js var win = require'windows-cpu'; wind.findLoad'foo & calc.exe'; Recommendation Update to version 0.1.5 or later...

PT-2017-10915

Name of the Vulnerable Software and Affected Versions windows-cpu versions prior to 0.1.5 Description The issue allows for command injection, resulting in code execution as the Node.js user. Specifically, versions of windows-cpu before 0.1.5 are affected, where arbitrary code can be executed when...

Arbitrary Command Execution

windows-cpu is vulnerable to arbitrary command execution. This is because the findLoad method doesn't sanitize or perform any validation before passing user-input to the shell...

Command Execution

Overview Version of windows-cpu before 0.1.5 will execute arbitrary code passed into the first argument of the findLoad method, resulting in remote code execution. Proof of Concept var win = require'windows-cpu'; wind.findLoad'foo & calc.exe'; Recommendation Update to version 0.1.5 or later...