CVE-2017-16034

Affected versions of "pidusage" pass unsanitized input to "childprocess.exec", resulting in arbitrary code execution in the "ps" method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable...

GHSA-H2P3-H48H-9JJ7 PIDUsage Enables OS Command Injection

Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept js var pid =...

PIDUsage Enables OS Command Injection

Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept js var pid =...

GHSA-HFQ9-RFPV-J8R8 Command Injection in pidusage

Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept var pid = require'pidusage';...

PT-2020-8132

Name of the Vulnerable Software and Affected Versions: pidusage versions prior to 1.1.5 Description: The issue allows for arbitrary code execution in the ps method due to unsanitized input being passed to child process.exec. This affects pidusage on Darwin, SunOS, FreeBSD, and AIX systems. Window...

PT-2017-10916

Name of the Vulnerable Software and Affected Versions soyuka/pidusage versions 1.1.4 and earlier Description The issue allows for command injection in the module, resulting in arbitrary command execution. Affected versions of pidusage pass unsanitized input to child process.exec, leading to...

Command Injection

pidusage is vulnerable to command injections. Unsanitized input given to childprocess.exec resulting in command injection in the ps method. This is caused because the pid is never cast to an integer as it expects. Windows and Linux are not vulnerable but Darwin, SunOS, FreeBSD, and AIX are...