Everything TechSec Observer has reported about OS Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A medium-severity OS command injection bug in FortiManager’s fgfmd daemon allows attackers with cluster credentials to run arbitrary code on the system.
A critical vulnerability in the @mborne/extract library allows attackers to execute system commands via shell metacharacters in path options.
A critical OS command injection flaw in Stills allows attackers to execute shell commands via crafted file paths, requiring immediate updates for affected users.