Command Injection

p4 is vulnerable to command injection. The vulnerability exists due to improper input sanitization in the runCommand function, which allows an attacker to inject maliciously crafted commands into the system...

CVE-2020-7602

node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand" is called by "getDevices" function in file "linux/manager.js", which is required by the "index. process.env.NMCLI" in the file "linux/manager.js". This function is used to construct the argument of function...