Archive
28 February 2015
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Critical —
dns-sync command injection vulnerability
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.