pown

Pown Pown.js es un kit de pruebas de seguridad y explotación construido sobre Node.js y NPM. A diferencia de las herramientas de seguridad tradicionales, notablemente Metasploit, Pown.js considera que los frameworks son un antipatrón. Por lo tanto, cada funcionalidad en Pown es en realidad un...

CVE-2023-25653

CVE-2023-25653 affects the node-jose library (JOSE for web browsers and Node.js) when using the non-default fallback crypto backend. The root cause is an infinite loop in ECC-related calculations due to how the modular inverse result from the jsbn library can be negative, which breaks the Barrett...

CVE-2017-16007

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption JOSE for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key...