EUVD-2026-81596

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool...

GHSA-WJWH-QQVP-G4P4 vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

Summary There is a sandbox escape in vm2 3.11.5 / current HEAD when it is used on Node.js 26. The issue is reachable from a default new VM sandbox. No NodeVM, require permission, host object injection, or intentionally unsafe configuration is required. The escape is a patch-bypass of the same...

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

Summary There is a sandbox escape in vm2 3.11.5 / current HEAD when it is used on Node.js 26. The issue is reachable from a default new VM sandbox. No NodeVM, require permission, host object injection, or intentionally unsafe configuration is required. The escape is a patch-bypass of the same...

EUVD-2026-81605

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass...

EUVD-2026-63829

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name...

CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...

CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-33937

CVE-2026-33937 — حقن AST في Handlebars.js وتنفيذ التعليمات البرمجية عن بُعد RCE الإصدارات من 4.0.0 حتى 4.7.8 من Handlebars.js متأثرة. درجة CVSS: 9.8 حرجة. نظرة عامة CVE-2026-33937 هو ثغرة من نوع الارتباك النمطي type confusion في Handlebars.js. تقبل دالة Handlebars.compile كلاً من سلسلة القالب وكا...

Node.js-CVE-2024-39943

ثغرة تنفيذ الأوامر في Node.js HFS CVE-2024-39943 الدفعة الثالثة من مدرسة القبعة البيضاء – نو جونغ مين @JenmrR الملخص في بيئة خادم HFS القائمة على Node.js، توجد ثغرة يتم فيها تنفيذ محتوى الملف المرفوع عبر childprocess.execSync. يمكن للمهاجم تنفيذ أوامر نظام التشغيل مباشرة من خلال ميزة رفع الملفات،...

CVE-2026-102282

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-102282 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-102282 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2022-24999

CVE-2022-24999 يحتوي هذا المستودع على عينات استغلال للثغرة التي وجدناها في مكتبة JS "qs" في ديسمبر 2021. تم إصلاح هذه الثغرة في express v4.17.3 و qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, و v6.2.4. قنابل المصفوفات والسلاسل النصية في qs الإصدارات الضعيفة من "qs" تسمح بإنشا...

undici: undici: Denial of Service via unrequested WebSocket subprotocol

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service DoS...

undici: undici: Denial of Service via unrequested WebSocket subprotocol

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service DoS...

Exploit-For-CVE-2022-36067

Exploit-For-CVE-2022-36067 يحتوي هذا المستودع على الحمولة Payload الخاصة بثغرة CVE-2022-36067 كيف تستغل الثغرة؟ الصق الحمولة الموجودة في payload.js مع الأمر الذي تريد تشغيله. الاختبار على جهاز محلي. للاختبار على جهاز محلي، استنسخ المستودع باستخدام git clone، ثم ثبّت التبعيات dependencies وقم بتشغ...

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE जानकारी CVE नंबर : CVE-2023-25813 विवरण : Sequelize 6.19.1 संस्करण में, replacements विकल्प के माध्यम से पारित इनपुट मान उचित रूप से एस्केप नहीं किए जाते हैं, जिससे विशिष्ट क्वेरी कॉन्फ़िगरेशन के आधार पर SQL इंजेक्शन हो सकता है। कमजोरी का दायरा : Sequelize 6.19.0 और उससे कम...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool एक ग्राफिकल व्यापक उपयोगिता उपकरण। परिचय CVE-2025-55182 के लिए एक स्टैंडअलोन सुरक्षा मूल्यांकन उपकरण, Go में विकसित, ग्राफिकल इंटरफ़ेस GUI के साथ, शीघ्रता से भेद्यता का पता लगाने और सत्यापन के लिए। परिवर्तन लॉग v1.3.0 Godzilla गॉडज़िला मेमशेल समर्थन जोड़ा...

INF8602-CVE-2020-8835

INF8602-CVE-2020-8835 اختبار استغلال النواة 1. الاختبار بدون Docker cd ../app npm i node server.js 2. الاختبار باستخدام Docker لاختبار القدرة الدفاعية Make sure to be in the same directory as the Dockerfile Build the Docker image docker build . -t inf8602/node-web-app Your docker image should be...