9 matches found
CVE-2026-27607
CVE-2026-27607 Proof of concept for CVE-2026-27607, published as GHSA-w5fh-f8xh-5x3p. Run Needs Node.js and docker + compose. Install dependencies: npm ci Start vulnerable RustFS instance: docker compose up wait for startup Run demo: ./exploit.js...
CVE-2021-41773-exploit
Usage file ip-ports.txt: root@kitploit: 1.1.1.1:80 root@kitploit: node CVE-2021-41773.js ip-ports.txt...
CVE-2019-5010
CVE-2019-5010 Author: Jonathan M. Wilbur Copyright Year: 2019 License: MIT License How to use 1. Install all dependencies by running npm install. 2. Compile the project using npm run build. 3. Run node ./dist/index.js to create the evil certificate in ./dist/cve-2019-5010-cert.pem. 4. Bring up th...
EUVD-2025-23540
Malicious code in bioql PyPI...
CVE-2023-26128
All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...
CVE-2019-17625
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron,...
Linux Distros Unpatched Vulnerability : CVE-2023-42282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...
