Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2021/12/07 12:15 a.m.•19 views

CVE-2021-44684

naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...

9.8CVSS7.3AI score0.02573EPSS
SaveExploits1References3
Mend
Mend
•added 2021/12/06 11:37 p.m.•5 views

CVE-2021-44684

naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...

9.8CVSS0.02573EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•9 views

CVE-2021-44684: Improper Neutralization of Special Elements used in an OS Command

naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...

9.8CVSS5.9AI score0.02573EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/06 12:00 a.m.•6 views

PT-2021-24152

Name of the Vulnerable Software and Affected Versions: naholyr github-todos version 3.1.0 Description: The issue concerns a command injection vulnerability. Specifically, the range argument for the hook subcommand is concatenated without validation and directly used by the exec function. This lac...

9.8CVSS0.02573EPSS
SaveExploits1References9
Rows per page
Query Builder