Denial Of Service (DoS)

libp2p is vulnerable to denial of service. The vulnerability is due to improper validation in the number of requests, which results in the host OS killing the process...

openssh security, bug fix, and enhancement update

8.0p1-13 - Upstream: ClientAliveCountMax=0 disable the connection killing behaviour 2015828 8.0p1-12 - Add support for 'Include' directive in sshdconfig file 1926103 8.0p1-11 - CVE-2021-41617 upstream fix 2008885...

Schain owners can rug pull users' funds

Lines of code Vulnerability details Impact Once a chain has been killed the chain owner is able to call getFunds on each of the deposit boxes and transfer funds/tokens wherever he/she wishes Even if the owner is benevolent the fact that there is a rug vector available may negatively impact the...

Phant0m - Windows Event Log Killer

Svchost is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption. Grouping multiple services into a single process conserves computing resources, and this consideration was of particular concer...

Design/Logic Flaw

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

GHSA-CQ77-8JPX-892G Command Injection in killing

This affects all versions of package killing up to and including 1.0.6. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

reliable-macaca-slave (>=1.0.0, <=2.1.0), reliable-slave (>=1.0.0, <=1.0.3) potentially affected by CVE-2021-23381 via killing (1.0.6)

killing NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: OSV:GHSA-CQ77-8JPX-892G...

Command Injection in killing

This affects all versions of package killing up to and including 1.0.6. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23381

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

Design/Logic Flaw

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23381 Arbitrary Command Injection

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23381

CVE-2021-23381 affects all versions of the npm package killing. The root cause is use of child_process.exec without input sanitization, enabling an attacker-controlled input to execute arbitrary commands. Public advisories (GHSA-CQ77-8JPX-892G, OSV entry) describe command injection impacting vers...

CVE-2021-23381

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

npm killing 命令注入漏洞

npm killing is an application from the American company npm. It is used to kill processes. killing There is a security vulnerability that can be exploited by an attacker to potentially execute arbitrary commands...

reliable-macaca-slave (>=1.0.0, <=2.1.0), reliable-slave (>=1.0.0, <=1.0.3) potentially affected by CVE-2021-23381 via killing (1.0.6)

killing NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: SNYK:JS-KILLING-1078532...

Arbitrary Command Injection

Overview killing is a Kill Process Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input...

SUSE-SU-2019:13976-1 Security update for supportutils

This update for supportutils fixes the following issues: Security vulnerabilities fixed: - CVE-2018-19636: Local root exploit via inclusion of attacker controlled shell script bsc1117751 - CVE-2018-19640: Users can kill arbitrary processes bsc1118463 - CVE-2018-19638: User can overwrite arbitrary...

SUSE-SU-2019:0480-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. - CVE-2018-19639: Fixed a code...

Code injection

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...

CVE-2018-16888

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...