Everything RedTeam Log has reported about OS Command Injection: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical OS command injection flaw in H3C Magic NX15 firmware allows remote exploitation, with public exploit code available for use.
Remote attackers can execute system commands on affected oscilloscopes, demanding urgent firmware checks for managed lab environments.
Authenticated admins can run OS commands via a vulnerable content pack, but a patch and mitigation are available.
Attackers can run operating system commands via archive paths in versions before 0.2.1, gaining full process privileges.