CVEs-PoC/2018/CVE-2018-16460.md

CVE-2018-16460

Description

A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.

POC

Reference

• https://hackerone.com/reports/390848

Github

• https://github.com/ossf-cve-benchmark/CVE-2018-16460