EUVD-2022-0452

Malicious code in bioql PyPI...

Command Injection

node-windows is vulnerable to command injection. The vulnerability exists because the PID parameter is not sanitized, which allows a remote attacker to inject arbitrary shell commands...

CVE-2021-45459

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...

Command injection

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...

nodejs 命令注入漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine through the Chromev8 engine for the packaging and the use of event-driven and non-blocking IO applications so that the development of high-performance Javascript background applications has become possible . A command injecti...