Vulnerabilities
npm launch-editor and Vite Command Injection on Windows via Path Suffix Bypass
Attackers can bypass file existence checks in npm packages to inject OS commands on Windows systems using crafted path suffixes.
Read moreWindows
Everything BlueTeam Insider has reported about Windows: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
NetEase Cloud Music Windows RCE: AES Key Forgery Enables Arbitrary Code Execution via IPC Bridge
A critical remote code execution vulnerability in NetEase Cloud Music for Windows allows attackers to run arbitrary code via manipulated URLs.
Read more