Vuln ID: CVE-2020-28431
Published: 2021-02-23 16:15:12Z
Description: All versions of package wc-cmd are vulnerable to Command Injection via the index.js file. PoC: var a =require("wc-cmd"); a("touch JHU")
Source: NVD.NIST.GOV
CVE-2020-28431 – All versions of package wc-cmd are vulnerable to Command Injection via the index.js file. …
- The rise of deepfake scams: How AI is being used to steal millions
- Report: Microsoft-OpenAI ownership might get conditional OK from EU regulators
- House passes bill banning Uncle Sam from snooping on citizens via data brokers
- Quishing Attacks Jump Tenfold, Attachment Payloads Halve
- Kaspersky Study: Devices Infected With Data-Stealing Malware Increased by 7 Times Since 2020