Lucene search
+L

1 matches found

OSV
OSV
added 2018/09/17 8:43 p.m.49 views

GHSA-CFHG-9X44-78H2 ps Enables OS Command Injection

Versions of ps before 1.0.0 are vulnerable to command injection. Proof of concept: js var ps = require'ps'; ps.lookup pid: "$touch success.txt" , functionerr, proc // this method is vulnerable to command injection if err throw err; if proc console.logproc; // Process name, something like "node" o...

9.8CVSS9.5AI score0.02856EPSS
SaveExploits0References5
Rows per page
Query Builder