Design/Logic Flaw

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration...

CVE-2017-1000491

CVE-2017-1000491 affects the Shiba markdown live preview app, version 1.1.0, with a cross-site scripting (XSS) vulnerability that can lead to code execution. The root cause is enabled Node.js integration in the app environment. Exploit specifics, affected platforms, and remediation are not provid...

CVE-2017-1000492

CVE-2017-1000492 affects Leanote-desktop v2.5. The vulnerability is a cross-site scripting (XSS) flaw caused by enabled Node integration, which can lead to code execution. Multiple sources (NVD and Red Hat, OSV, CNVD, etc.) corroborate the issue. CVSS details: CVSS2 base 4.3 (I:P) and CVSS3 base ...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000491

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration...

CVE-2017-1000491

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration...

CVE-2017-1000491: Improper Neutralization of Input During Web Page Generation

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration...

PT-2018-5256

Name of the Vulnerable Software and Affected Versions Leanote-desktop version v2.5 Description The issue is related to a XSS that leads to code execution due to enabled node integration. Recommendations For Leanote-desktop version v2.5, consider disabling node integration as a temporary workaroun...

CVE-2017-1000492: Improper Neutralization of Input During Web Page Generation

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

PT-2018-5255

Name of the Vulnerable Software and Affected Versions Shiba markdown live preview app version 1.1.0 Description The issue allows for XSS, leading to code execution due to enabled node integration. Recommendations For version 1.1.0, disable node integration to prevent code execution until a patch ...

GitHub Electron nodeIntegration Bypass Vulnerability

GitHub Electron is an open source framework for building desktop applications using HTML, CSS and JavaScript. A bypass vulnerability exists in GitHub Electron nodeIntegration. Allows an attacker to perform remote command execution...

CVE-2017-12581

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy SOP is a precondition; however, recent Electron versions do...