Command Injection

dcnnt is vulnerable to Command Injection. The vulnerability is due to improper input validation within notifications.py of Notification Handler, allowing remote attackers to execute arbitrary commands...

CVE-2023-1000

A vulnerability was found in cyanomiko dcnnt-py up to 0.9.0. It has been classified as critical. Affected is the function main of the file dcnnt/plugins/notifications.py of the component Notification Handler. The manipulation leads to command injection. It is possible to launch the attack remotel...