Skip to content
OpenAdvisories

Archive

28 February 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical —

    dns-sync command injection vulnerability

    The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.