9 matches found
CVE-2021-41773-exploit
Использование файл ip-ports.txt: 1.1.1.1:80 node CVE-2021-41773.js ip-ports.txt...
CVE-2019-5010
CVE-2019-5010 Автор: Jonathan M. Wilbur Год авторского права: 2019 Лицензия: MIT License Как использовать 1. Установите все зависимости, выполнив npm install. 2. Скомпилируйте проект с помощью npm run build. 3. Запустите node ./dist/index.js для создания вредоносного сертификата в...
CVE-2026-27607
CVE-2026-27607 Доказательство концепции для CVE-2026-27607, опубликовано как GHSA-w5fh-f8xh-5x3p. Запуск Требуются Node.js и docker + compose. Установите зависимости: npm ci Запустите уязвимый экземпляр RustFS: docker compose up дождитесь запуска Запустите демо: ./exploit.js...
EUVD-2025-23540
Malicious code in bioql PyPI...
CVE-2023-26128
All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...
CVE-2019-17625
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron,...
Linux Distros Unpatched Vulnerability : CVE-2023-42282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...
