Vulnerabilities
Node.js Library Flaw Lets Attackers Run OS Commands via Archive Paths
An unpatched command injection flaw in the @mborne/extract npm package allows remote attackers to execute arbitrary system commands with Node.js privileges.
OS command injection
Everything Sandbox Desk has reported about OS command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations at Risk: AEM Critical OS Injection Enables Remote Code Execution Without User Interaction
A critical OS command injection flaw in Adobe Experience Manager allows low-privileged users to execute arbitrary code without requiring any user interaction.