pheditor/pheditor
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter | pheditor/pheditor | Composer | بحرانی | اصلاح گزارش شده | |
| Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection | pheditor/pheditor | Composer | زیاد | اصلاح گزارش شده | |
| Pheditor has an authenticated terminal command whitelist bypass | pheditor/pheditor | Composer | زیاد | اصلاح گزارش شده | |
| Pheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes | pheditor/pheditor | Composer | زیاد | اصلاح گزارش شده | |
| Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password | pheditor/pheditor | Composer | بحرانی | اصلاح گزارش شده | |
| Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise | pheditor/pheditor | Composer | بحرانی | اصلاح گزارش شده |