Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-21315 PoC — Command Injection Vulnerability

Source
https://github.com/xMohamed0/CVE-2021-21315-POC
Associated Vulnerability
Title:Command Injection Vulnerability (CVE-2021-21315)
Description:The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. As a workaround instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected.
Readme
# CVE-2021-21315-POC
File Snapshot

 [4.0K]  /data/pocs/1707b09b2ed27ffaf825864c6ad0a679ecf4fc9d
├── [1.8K]  CVE-2021-21315-POC.py
└── [  20]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →