[SECURITY] [DLA 4013-1] node-mocha security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4013-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès January 11, 2025 https://wiki.debian.org/LTS -...

DLA-4013-1 node-mocha - security update

Bulletin has no description...

Debian dla-4013 : mocha - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4013 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4013-1 [email protected]...

mocha-repository.info Cross Site Scripting vulnerability OBB-3891544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mocha-repository.info Cross Site Scripting vulnerability OBB-3883501

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mocha-repository.info Cross Site Scripting vulnerability OBB-3880135

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mocha-repository.info Cross Site Scripting vulnerability OBB-3335620

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mocha-repository.info Cross Site Scripting vulnerability OBB-3258808

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mocha-repository.info Cross Site Scripting vulnerability OBB-2847857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4655 Malicious code in mocha-junit-reporters-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36310669cb81042359b5d17259bddbe5ae2c47e98223446020c5be918f3b39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocha-junit-reporters-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36310669cb81042359b5d17259bddbe5ae2c47e98223446020c5be918f3b39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocha-intellij (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7b23b44db257b44949a1d9b38ddf824de21590e0dc5bba9025e19bf1b556254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4654 Malicious code in mocha-intellij (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7b23b44db257b44949a1d9b38ddf824de21590e0dc5bba9025e19bf1b556254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Inefficient Regular Expression Complexity in tapjs/tap-mocha-reporter

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in tap-mocha-reporter. The ReDoS vulnerability is mainly due to the regex /^\s+|\s+$|/g and can be exploited with the following code. Proof of Concept // PoC.js var tapMochaReporter =...

camp (=15.2.23), directdetect (>=1.0.0 <=1.2.0) +3 more potentially affected by unknown CVE via localeval (>=13.12.11 <=15.2.3)

localeval NPM version =13.12.11, =1.0.0, =1.0.0, =1.0.1 - mocha-test-runner =0.4.3 Source cves: unknown CVE Source advisory: OSV:GHSA-MMQV-M45H-Q2HP...

Mocha Telnet Lite For iOS 4.2 Denial Of Service

Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2020-08-03 Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of...

Mocha Telnet Lite for iOS 4.2 - (User) Denial of Service Exploit

Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of Service DoS Local Tested on OS:...

Mocha Telnet Lite for iOS 4.2 - &#039;User&#039; Denial of Service (PoC)

Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2020-08-03 Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of...

Regular Expression Denial Of Service (ReDoS)

mocha is vulnerable to Regular Expression Denial Of Service. The stack prettifier function which is enabled by default, consumes excessive resources and requires a long time to complete when parsing a large Error.message containing certain assertions against large objects...

Mocha W32 LPD 1.9 Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39498/info Mocha W32 LPD is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow attackers to execute arbitrar...