Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/03/21 3:45 p.m.32 views

CVE-2021-23360 Arbitrary Command Injection

This affects the package killport before 1.0.2. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization. Running this PoC will cause the command touch success to be...

7.5CVSS9.2AI score0.0234EPSS
SaveExploits1References3
Rows per page
Query Builder