Vulnerabilities
PingTools Network Utilities 4.64 Has High-Severity Command Injection Flaw
A command injection flaw in PingTools allows remote attackers to execute arbitrary code via the Watcher ICMP service host field.
Command Injection
Everything NetSec Observer has reported about Command Injection: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Claude Agent SDK Python CLI Injection Bypasses Permission Controls
Unvalidated resume tokens in the Python SDK allow attackers to inject CLI flags, executing arbitrary commands outside security boundaries in versions before 0.2.121.
Vulnerabilities
Dokku Command Injection via Docker Options Plugin in Pre-0.38.25 Builds
Attackers with app-level access can execute arbitrary commands on the host by injecting shell syntax into Docker configuration strings processed by Bash.
Vulnerabilities
OpenSpug Critical RCE: Unauth OS Command Injection in File Transfer Affects v3.0-4.0.1 With No Fix
A critical remote code execution vulnerability in OpenSpug's file transfer module allows unauthenticated attackers to inject operating system commands.
Vulnerabilities
Command Injection: How It Works and How to Stop It
Command injection lets attackers run system commands by tricking applications into treating user input as executable code rather than data.
Vulnerabilities
Stop Command Injection: Practical Prevention Measures That Work
Input validation fails because context matters; you must escape data for the specific shell parser or use language-native APIs that bypass the shell entirely.