1. Critical Command Injection in Admin Logs Endpoint Exposes Server to Arbitrary Shell Execution
A critical security vulnerability has been patched in a web application's administrative interface, where a command injection flaw allowed attackers to execute arbitrary shell commands on the underlying server. The exposure stemmed from the `/api/admin/logs` endpoint, which used the `exec()` function to read log files ...