131242 matches found
lodash.template-fixed
lodash.template v4.5.0 El método .template de Lodash exportado como un módulo de Node.js. Instalación Usando npm: $ sudo -H npm i -g npm $ npm i --save lodash.template En Node.js: var template = require'lodash.template'; Consulte la documentación o el código fuente del paquete para más detalles...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 Detalle Descripción El paquete pdfkit desde 0.0.0 es vulnerable a Inyección de Comandos donde la URL no está debidamente saneada. PoC Iniciar un servidor HTTP 1- python3 -m http.server 80 Iniciar un listener de netcat 2- nc -lnvp 'Target Port' Hacer una solicit...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE Exploit Una herramienta de investigación de seguridad para detectar y probar la vulnerabilidad CVE-2025-12735 en los paquetes npm expr-eval y expr-eval-fork. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas y fines educativos. El acceso no...
revera
Revera The credit score for npm packages. Revera helps you decide whether a package is worth installing before you run npm install. It analyzes package quality, maintenance, security, ecosystem health, and publisher trust — and now propagates risk transitively across your entire dependency graph ...
Malicious code in @galicia-toolkit-nestjs/swagger (npm)
Source: amazon-inspector 605d8d8afe172d78840f3617c35733b47635a3482beba461bc1015c45840e250 The package presents itself as a NestJS Swagger integration name resembles @nestjs/swagger, published at version 999.0.2 in a dependency-confusion shape but ships a stub JavaScript API forRoot/createLogger...
egg-scripts-CVE-2018-3786
egg-scripts Herramienta de despliegue para el proyecto egg. Nota: Windows está parcialmente soportado, ver22 Instalación $ npm i egg-scripts --save Uso Agrega eggctl a los scripts de package.json: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Luego ejecuta como: npm start npm...
CVE-2026-39983
References https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...
deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-
deephas = 1.0.8. References: GitHub Advisory GHSA-2733-6c58-pf27 NVD CVE-2026-25047...
CVE-2026-29786
CVE-2026-29786 Research: Joshua van Rijswijk Description This repository contains a Proof of Concept PoC for CVE-2026-29786 , a vulnerability in the tar npm package that allows a crafted archive to create a hardlink pointing outside the intended extraction directory. The issue occurs when a tar...
CVE-2021-21315-exploit
CVE-2021-21315 Exploit Desc: Mi script en Python para explotar la librería de información del sistema para Node.js paquete npm "systeminformation". npmjs.com/systeminformation Pensé que este POC no mostraría impacto en el mundo real, pero será genial en CTF's...
ROOT-APP-NPM-GHSA-5P4M-2WFM-XMQJ GHSA-5p4m-2wfm-xmqj in js-yaml - Patched by Root
Root has patched GHSA-5p4m-2wfm-xmqj in the js-yaml package for Root:npm. Multiple fixed versions available...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 Exploit RCE en expr-eval Una herramienta de investigación de seguridad para detectar y probar la vulnerabilidad CVE-2025-12735 en los paquetes npm expr-eval y expr-eval-fork. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas y fines educativos. El acceso...
ROOT-APP-NPM-CVE-2026-82659 CVE-2026-82659 in nodemailer - Patched by Root
Root has patched CVE-2026-82659 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root
Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-961622 AIKIDO-2026-961622 in @fastify/busboy - Patched by Root
Root has patched AIKIDO-2026-961622 in the @fastify/busboy package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47683 CVE-2026-47683 in vm2 - Patched by Root
Root has patched CVE-2026-47683 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root
Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root
Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...