Tagged articles

Command Injection

3 articles · Page 1 of 1

Jul 27, 2026 · Information Security

How a Malicious claude-cli:// Link Grants Remote Code Execution on Claude Code

A security researcher discovered that the Claude Code CLI can be compromised by a crafted claude-cli:// URL that injects a malicious --settings flag, allowing arbitrary command execution without any user confirmation or warning dialogs.

CLIClaude CodeCommand Injection

0 likes · 10 min read

How a Malicious claude-cli:// Link Grants Remote Code Execution on Claude Code

Black & White Path

Feb 13, 2026 · Information Security

Critical Remote Command Execution Flaw in WeChat Linux 4.1.0.13 Impacts Major Chinese OSes, Skips HarmonyOS

A high‑severity (CVSS 8.8) command‑injection vulnerability in WeChat Linux client 4.1.0.13 allows an attacker to execute arbitrary shell commands by sending a file with a specially crafted name, affecting most Linux distributions and Chinese‑made operating systems while leaving HarmonyOS untouched.

Command InjectionLinuxRemote Code Execution

0 likes · 21 min read

Critical Remote Command Execution Flaw in WeChat Linux 4.1.0.13 Impacts Major Chinese OSes, Skips HarmonyOS

Sohu Tech Products

Dec 20, 2023 · Information Security

Command Injection Vulnerabilities in Node.js: Analysis and Prevention

The article examines how command‑injection flaws in popular Node.js npm packages such as find‑exec and fs‑git arise from unsafe concatenation of user input into shell commands, and recommends rigorous validation, using execFile or spawn, and regular dependency audits to prevent catastrophic system compromise.

CVECommand InjectionSecure Coding

0 likes · 11 min read

Command Injection Vulnerabilities in Node.js: Analysis and Prevention