Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2017/10/24 6:33 p.m.•39 views

GHSA-Q5PQ-PGRV-FH89 dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.5AI score0.02843EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•45 views

dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.3AI score0.02843EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2015/02/28 1:00 a.m.•47 views

CVE-2014-9682

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

7.4AI score0.02843EPSS
SaveExploits0References3
Mend
Mend
•added 2015/02/28 1:00 a.m.•7 views

CVE-2014-9682

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS0.02843EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/02/28 12:00 a.m.•7 views

CVE-2014-9682: Improper Neutralization of Special Elements used in a Command

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS6.3AI score0.02843EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/02/28 12:00 a.m.•7 views

PT-2015-4351

Name of the Vulnerable Software and Affected Versions dns-sync module versions prior to 0.1.1 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function. This can be exploited by passing malicio...

10CVSS0.02843EPSS
SaveExploits0References9
Rows per page
Query Builder