Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Picotts Project Subscribe
Filtered by product Picotts
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23378 1 Picotts Project 1 Picotts 2021-04-22 7.5 HIGH 9.8 CRITICAL
This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.