PT-2020-8132

Name of the Vulnerable Software and Affected Versions: pidusage versions prior to 1.1.5 Description: The issue allows for arbitrary code execution in the ps method due to unsanitized input being passed to child process.exec. This affects pidusage on Darwin, SunOS, FreeBSD, and AIX systems. Window...

PT-2020-14444

Name of the Vulnerable Software and Affected Versions RaspberryTortoise versions prior to 2012-10-28 Description The issue allows for remote code execution via shell metacharacters in a URI. Specifically, the file nodejs/raspberryTortoise.js lacks validation on the incomingString parameter before...

PT-2019-12633

Name of the Vulnerable Software and Affected Versions Gridea version 0.8.0 Description The issue allows for arbitrary code execution through an XSS vulnerability. This can be achieved by calling the Nodejs module, as demonstrated by the use of child process.exec and the substring img src=...

PT-2018-5218

Name of the Vulnerable Software and Affected Versions fs-git version 1.0.1 Description The issue concerns a command injection problem. The buildCommand method in the fs-git module does not properly sanitize data, making it vulnerable to command injection across all methods that use it and call...