#command-injection
2 registros
-
Variatype
Git exposto com credenciais, path traversal + CVE-2025-66034 no fonttools, command injection no FontForge (CVE-2024-25082) e sudo os.path.join → root.
-
Imagery
App Python/Werkzeug: stored XSS rouba o cookie do admin, LFI exfiltra o source e command injection dá foothold; root via sudo no backup manager charcol.