Everything Vuln Post has reported about CWE-78: 4 stories, newest first. Part of our Vulnerabilities coverage.
Python imaging library Pillow has released version 13.0.0 to fix a critical argument injection flaw that allows attackers to execute arbitrary commands via Ghostscript.
A high-severity injection vulnerability in BentoML allows attackers to manipulate Docker build instructions through crafted configuration files, potentially exposing build secrets.
A critical command injection vulnerability in TR7 ASP requires immediate version checks for both virtual and physical deployment models.
A critical OS command injection in Adobe Experience Manager lets low-privileged users run code without interaction. No patch is confirmed yet.