npm search RCE? - Escape Sequence Injection
Target Program: Radare2, GitHub, NPM CLI
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Vin01Abusing title reporting and tmux integration in iTerm2 for code execution
pentester.land
by Vin01Abusing url handling in iTerm2 and Hyper for code execution
pentester.land
by solid-snailFrom Terminal Output to Arbitrary Remote Code Execution
medium.com/tag/bug-bounty
by Hackliva Academy