9 matches found
CVE-2021-41773-exploit
사용법 파일 ip-ports.txt: root@kitploit: 1.1.1.1:80 root@kitploit: node CVE-2021-41773.js ip-ports.txt...
CVE-2019-5010
CVE-2019-5010 著者: Jonathan M. Wilbur 著作権年: 2019 ライセンス: MIT License 使い方 1. すべての依存関係をインストールします。npm install を実行してください。 2. プロジェクトをコンパイルします。npm run build を実行してください。 3. node ./dist/index.js を実行して、悪意のある証明書を ./dist/cve-2019-5010-cert.pem に作成します。 4. docker-compose up で被害者のコンテナを起動します。...
CVE-2026-27607
CVE-2026-27607 CVE-2026-27607 の概念実証（PoC）。GHSA-w5fh-f8xh-5x3p として公開されています。 実行方法 Node.js と docker + compose が必要です。 依存関係のインストール: npm ci 脆弱な RustFS インスタンスを起動: docker compose up 起動完了を待つ デモを実行: ./exploit.js...
EUVD-2025-23540
Malicious code in bioql PyPI...
CVE-2023-26128
All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...
CVE-2019-17625
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron,...
Linux Distros Unpatched Vulnerability : CVE-2023-42282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...
