📦 Brpc

This CVE describes a remote command injection vulnerability in Apache bRPC's heap profiler service. Attackers can execute arbitrary commands by injecting malicious parameters into the /pprof/heap endp...

This vulnerability in Apache bRPC allows attackers to execute arbitrary code by manipulating the ServerOptions pid_file parameter. Attackers who can influence this parameter during server startup can ...