Lucene search
K

6 matches found

OSV
OSV
added 2025/12/16 10:37 p.m.0 views

GHSA-WPHJ-FX3Q-84CH systeminformation has a Command Injection vulnerability in fsSize() function on Windows

Summary The fsSize function in systeminformation is vulnerable to OS Command Injection CWE-78 on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this...

8.1CVSS6.3AI score0.00054EPSS
Exploits1References4
NVD
NVD
added 2025/12/16 7:16 p.m.3 views

CVE-2025-68154

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...

8.1CVSS0.00054EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/12/16 6:18 p.m.26 views

CVE-2025-68154 Command Injection in fsSize() on Windows

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...

8.1CVSS0.00054EPSS
Exploits1References2
OSV
OSV
added 2025/12/16 6:18 p.m.5 views

CVE-2025-68154 Command Injection in fsSize() on Windows

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...

8.1CVSS7.5AI score0.00054EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51775

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.27.14 Description The fsSize function in the systeminformation library is susceptible to OS command injection on Windows systems. The drive parameter, when directly concatenated into a PowerShell command...

8.1CVSS7.3AI score0.00054EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

systeminformation 操作系统命令注入漏洞

systeminformation is an Npm repository for obtaining operating system information by Sebastian Hildebrandt, an individual developer. An OS command injection vulnerability exists in systeminformation versions prior to 5.27.14, which stems from an OS command injection vulnerability in the fsSize...

8.1CVSS7.4AI score0.00054EPSS
Exploits1References2
Rows per page
Query Builder