Lucene search
+L

26 matches found

Vulnrichment
Vulnrichment
•added 2022/08/31 3:10 p.m.•9 views

CVE-2022-36045 Account takeover via cryptographically weak PRNG in NodeBB Forum

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9CVSS9.5AI score0.0132EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/08/31 3:10 p.m.•73 views

CVE-2022-36045 Account takeover via cryptographically weak PRNG in NodeBB Forum

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9CVSS9.7AI score0.0132EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•6 views

CVE-2022-36045: Use of Insufficiently Random Values

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9.8CVSS7.8AI score0.0132EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2020/10/14 12:00 a.m.•506 views

NodeBB Forum 1.14.2 Account Takeover

Exploit Title: NodeBB Forum 1.12.2-1.14.2 - Account Takeover Date: 2020-08-18 Exploit Author: Muhammed Eren Uygun Vendor Homepage: https://nodebb.org/ Software Link: https://github.com/NodeBB/NodeBB Version: 1.12.2-1.14.2 Tested on: Linux CVE : CVE-2020-15149 -...

6.5CVSS9.7AI score0.02434EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2020/10/14 12:00 a.m.•507 views

NodeBB Forum 1.12.2-1.14.2 - Account Takeover

Exploit Title: NodeBB Forum 1.12.2-1.14.2 - Account Takeover Date: 2020-08-18 Exploit Author: Muhammed Eren Uygun Vendor Homepage: https://nodebb.org/ Software Link: https://github.com/NodeBB/NodeBB Version: 1.12.2-1.14.2 Tested on: Linux CVE : CVE-2020-15149 -...

9.9CVSS8.4AI score0.02434EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2016/05/07 12:00 a.m.•23 views

NodeBB Detection (HTTP)

HTTP based detection of NodeBB. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111100";...

7.4AI score
SaveExploits0References2
Rows per page
Query Builder