Vulnerabilities
DrayTek Vigor2960 Command Injection Flaw Exposes End-of-Support Devices
A critical remote command injection flaw in unsupported DrayTek routers has a public exploit, though a limited patch is available for the affected version.
command injection
Everything Firewall Scoop has reported about command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.3: Critical Command Injection in git-diff <2.0.7 Requires Immediate Patching
A severe flaw in the git-diff package allows attackers to run arbitrary shell commands via crafted diff strings, affecting versions prior to 2.0.7.