bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root

Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-32640 CVE-2021-32640 in ws - Patched by Root

Root has patched CVE-2021-32640 in the ws package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-27290 CVE-2021-27290 in ssri - Patched by Root

Root has patched CVE-2021-27290 in the ssri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-23436 CVE-2021-23436 in immer - Patched by Root

Root has patched CVE-2021-23436 in the immer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-28477 CVE-2020-28477 in immer - Patched by Root

Root has patched CVE-2020-28477 in the immer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-3757 CVE-2021-3757 in immer - Patched by Root

Root has patched CVE-2021-3757 in the immer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root

Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root

Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...

certighost-cve-2026-54121-slides

Certighost Slidev 演示文稿 此目录包含 CVE-2026-54121.md 的 Slidev 演示文稿。 root@kitploit: npm install npm run dev 其他命令： root@kitploit: npm run build npm run export 源幻灯片为 slides.md。幻灯片全局样式位于 style.css，Mermaid 设置位于 setup/mermaid.ts。...

DoS-Braces-3.03

CVE-Candidato: Denegación de Servicio en braces mediante Expansión de Llaves Separadas por Comas Paquete: braces npm Versión: 3.0.3 última Gravedad: ALTA CVSS 7.5 CWE: CWE-400 Consumo de Recursos No Controlado Estado: No reportado Nota: Este es un hallazgo independiente. CVE-2024-4068 abordó la...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

npm-demo

浏览器演示（NPM/JavaScript） 有关如何运行和使用此演示的说明，请参阅实操试用指南。...

Malicious code in chromatitle-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941 src/index.js unconditionally calls bootstrap at module load. On win32, src/utils/bootstrap.js base64-decodes a URL, filename, and staging directory...

Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

Malicious code in cminhouse-api-gateway-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42971bbb30a4cb0a1da27be3953339fdbda449e4d10e997aac72212df0a8b1d index.js is wired as the package's postinstall script and also runs on require via main. After skipping CI/test/Docker environments guards on...

npm-cve-2026-26830-26833

npm CVE 索引，2026年3月 本仓库仅为四个公开公告仓库的目录页，这些公告涉及由 MITRE 于 2026-02-25 分配的 npm 包命令注入漏洞。 截至 2026-03-24，每个包的最新 npm 版本仍受影响： CVE| 包| 最新 npm 版本| 状态 ---|---|---|--- CVE-2026-26830| pdf-image| 2.0.0| 受影响，未发布修复版本 CVE-2026-26831| textract| 2.5.0| 受影响，未发布修复版本 CVE-2026-26832| node-tesseract-ocr| 2.2.1| 受影响，未发布修复版本...

CVE-2021-32804

CVE-2021-32804 yamory blog 「CVE-2021-32804 npmにも影響があるnode-tarのパストラバーサルの脆弱性」 で利用したDocker環境の構築を行うためのレポジトリです。 环境搭建 root@kitploit: docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash 重现漏洞 node-tar root@kitploit: root@5e1af2148215:/poc node tar.js root@5e1af2148215:/poc su node...

lodash.template-fixed

lodash.template v4.5.0 Lodash のメソッド .template を Node.js モジュールとしてエクスポートしたものです。 インストール npm を使用する場合: root@kitploit: $ sudo -H npm i -g npm $ npm i --save lodash.template Node.js での使用: root@kitploit: var template = require'lodash.template'; 詳細については、ドキュメント または パッケージソース を参照してください。...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE 利用工具 一个用于检测和测试 expr-eval 和 expr-eval-fork npm 包中 CVE-2025-12735 漏洞的安全研究工具。 ⚠️ 免责声明 本工具仅用于授权的安全测试和教育目的 。未经授权访问计算机系统是违法的。请仅在您拥有所有权或明确书面授权的系统上使用本工具。 📋 概述 CVE-2025-12735 是 expr-eval 和 expr-eval-fork npm 包中的一个严重远程代码执行（RCE）漏洞。该漏洞允许攻击者在解析器使用的 context...