9 matches found
CVE-2026-27607
CVE-2026-27607 Prueba de concepto para CVE-2026-27607, publicada como GHSA-w5fh-f8xh-5x3p. Ejecución Requiere Node.js y docker + compose. Instalar dependencias: npm ci Iniciar la instancia vulnerable de RustFS: docker compose up esperar a que arranque Ejecutar la demo: ./exploit.js...
CVE-2021-41773-exploit
Uso archivo ip-ports.txt: 1.1.1.1:80 node CVE-2021-41773.js ip-ports.txt...
CVE-2019-5010
CVE-2019-5010 Autor: Jonathan M. Wilbur Año de copyright: 2019 Licencia: Licencia MIT Cómo usar 1. Instale todas las dependencias ejecutando npm install. 2. Compile el proyecto usando npm run build. 3. Ejecute node ./dist/index.js para crear el certificado malicioso en...
EUVD-2025-23540
Malicious code in bioql PyPI...
CVE-2023-26128
All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...
CVE-2019-17625
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron,...
Linux Distros Unpatched Vulnerability : CVE-2023-42282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...
