Vulnerabilities
Organisations Risk Remote Code Execution via Critical Command Injection in @enmaso/node-convert Library
A critical command injection flaw in @enmaso/node-convert allows remote execution of system commands through unsanitized inputs.
OS command injection
Everything Malware Brief has reported about OS command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Skyeye TTS Vulnerability Enables Unauth PowerShell Execution on Windows Servers
A critical unauthenticated command injection in Dromara Skyeye allows remote attackers to execute PowerShell code on Windows servers via a text-to-speech endpoint.