https://vulnerability.circl.lu/sightings/feed 2026-06-05T17:45:04.406206+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/de9dd66e-3bfa-4306-bf95-59a41ea7dee6/export 2026-06-05T17:45:04.778364+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "de9dd66e-3bfa-4306-bf95-59a41ea7dee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39243", "type": "seen", "source": "https://t.me/cibsecurity/50489", "content": "\u203c CVE-2022-39243 \u203c\n\nNuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes by using the JVM's Java_java_lang_UNIXProcess_forkAndExec method (1.2.0+), attackers can use NUL characters in their strings to perform command line injection. Java's ProcessBuilder isn't vulnerable because of a check in ProcessBuilder.start. NuProcess is missing that check. This vulnerability can only be exploited to inject command line arguments on Linux. Version 2.0.5 contains a patch. As a workaround, users of the library can sanitize command strings to remove NUL characters prior to passing them to NuProcess for execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T18:36:27.000000Z"} 2022-09-26T18:36:27+00:00