https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 08:13:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-37827 cnvd-2017-37827 https://cve.radiocsirt.org/vuln/cnvd-2017-37827 https://cve.radiocsirt.org/vuln/euvd-2026-170961 EUVD-2026-170961 https://cve.radiocsirt.org/vuln/euvd-2026-170961 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000219 <p>npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user</p> <p>npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000219 https://cve.radiocsirt.org/vuln/ghsa-63m4-fhf2-cmf7 <p><strong>Affected:</strong> npm: windows-cpu</p> <p>Version of `windows-cpu` before 0.1.5 will execute arbitrary code passed into the first argument of the `findLoad` method, resulting in remote code execution.</p> <p>## Proof of Concept</p> <p>```js var win = require(&#39;windows-cpu&#39;); wind.findLoad(&#39;foo &amp; calc.exe&#39;); ```</p> <p>## Recommendation</p> <p>Update to version 0.1.5 or later.</p> <p><strong>Affected:</strong> npm: windows-cpu</p> <p>Version of `windows-cpu` before 0.1.5 will execute arbitrary code passed into the first argument of the `findLoad` method, resulting in remote code execution.</p> <p>## Proof of Concept</p> <p>```js var win = require(&#39;windows-cpu&#39;); wind.findLoad(&#39;foo &amp; calc.exe&#39;); ```</p> <p>## Recommendation</p> <p>Update to version 0.1.5 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-63m4-fhf2-cmf7 https://cve.radiocsirt.org/vuln/gsd-2017-1000219 gsd-2017-1000219 https://cve.radiocsirt.org/vuln/gsd-2017-1000219