PT-2024-5724

Name of the Vulnerable Software and Affected Versions WD Discovery versions prior to 5.0.589 Description The issue is related to a misconfiguration in the Node.js environment settings of WD Discovery, which could allow code execution by utilizing the ELECTRON RUN AS NODE environment variable. Any...

CVE-2023-50975

The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled i.e., ELECTRONRUNASNODE can be used in production. This makes it easier for a compromised process to access banking information...

OpenVPN Connect Security Breach

OpenVPN Connect is a VPN Virtual Private Network client application from US-based OpenVPN. A security vulnerability exists in OpenVPN Connect that originates from allowing a local attacker to execute arbitrary code in the context of a nodejs process via the ELECTRONRUNASNODE environment variable...