9 matches found
CVE-2026-27607
CVE-2026-27607 Proof of Concept für CVE-2026-27607, veröffentlicht als GHSA-w5fh-f8xh-5x3p. Ausführen Benötigt Node.js und Docker + Compose. Abhängigkeiten installieren: npm ci Verwundbare RustFS-Instanz starten: docker compose up auf den Start warten Demo ausführen: ./exploit.js...
CVE-2021-41773-exploit
Utilisation fichier ip-ports.txt: root@kitploit: 1.1.1.1:80 root@kitploit: node CVE-2021-41773.js ip-ports.txt...
CVE-2019-5010
CVE-2019-5010 लेखक: Jonathan M. Wilbur कॉपीराइट वर्ष: 2019 लाइसेंस: MIT License उपयोग कैसे करें 1. सभी निर्भरताएँ स्थापित करने के लिए npm install चलाएँ। 2. प्रोजेक्ट को संकलित करने के लिए npm run build का उपयोग करें। 3. node ./dist/index.js चलाएँ ताकि ./dist/cve-2019-5010-cert.pem में...
EUVD-2025-23540
Malicious code in bioql PyPI...
CVE-2023-26128
All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...
CVE-2019-17625
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron,...
Linux Distros Unpatched Vulnerability : CVE-2023-42282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...
