A newly disclosed vulnerability in Samsung’s Open Source QA-Board tool allows attackers to execute arbitrary operating system commands with a critical severity rating.
An unauthenticated endpoint in Dromara Skyeye allows remote attackers to execute PowerShell commands via a format parameter vulnerability rated critical.