Tagged: systeminformation

December 23, 2024

CVE-2024-56334: Command Injection Flaw Exposes Millions of Node.js Systems to Attack

A severe command injection vulnerability (CVE-2024-56334) has been identified in the widely used Node.js system information package, which has over 8 million monthly downloads and a staggering 330 million total...

Vulnerability

September 25, 2023

CVE-2023-42810: Critical bug in systeminformation Node.js library with 8 monthly downloads

CVE-2023-42810 is a critical command injection vulnerability in systeminformation, a popular Node.js library for retrieving system information. This vulnerability could allow a remote attacker to execute arbitrary commands on the...