CVE-2019-15599

The vulnerability CVE-2019-15599 affects the Windows component of the Node package tree-kill, where the input to the kill() function is not properly sanitized and is concatenated into an exec() call. This leads to remote code execution if an attacker provides controlled input. Public advisories c...

CVE-2019-15598

CVE-2019-15598 affects the treekill/tree-kill module. The issue is a code injection vulnerability on Windows caused by insecurely concatenating user input into a system command, enabling remote code execution when input is controlled. References and advisories (HackerOne PoC, GHSA-J7FQ-P9Q7-5WFV,...