Hyper Security Vulnerability

hyper is a fast, correct HTTP implementation of Rust in the hyperium open source. A security vulnerability exists in Hyper prior to version 3.4.1, which stems from arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-23738: Undefined Security Weakness

An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor states "we dispute the report's accuracy ... the configuration does not enable remote code execution.."...

PT-2024-20049 · Hyper · Hyper

Name of the Vulnerable Software and Affected Versions: Hyper versions 3.4.1 and earlier Description: The issue allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Recommendations: For Hyper versions 3.4.1 and earlier, consider disabling...

PT-2024-20051 · Notion · Notion

Name of the Vulnerable Software and Affected Versions: Notion versions prior to 3.1.0 Description: The issue might allow code execution because of RunAsNode and enableNodeClilnspectArguments. The vendor states that the attacker must launch the Notion Desktop application with nonstandard flags tha...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

Code injection

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

CVE-2023-50643: Undefined Security Weakness

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

PT-2024-1677

Name of the Vulnerable Software and Affected Versions Evernote for MacOS version 10.68.2 Description An issue in Evernote for MacOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components. This is related to a buffer overflow in memory. Th...

CVE-2023-49314: Improper Control of Generation of Code

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack...

PT-2023-31164 · Asana · Asana Desktop

Name of the Vulnerable Software and Affected Versions: Asana Desktop version 2.1.0 Description: The issue allows code injection due to specific Electron Fuses, with inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments. This can be...

Asana Desktop Security Vulnerability

Asana Desktop is a desktop body application. A security vulnerability exists in Asana Desktop version 2.1.0, which stems from insufficient protection against code injection via RunAsNode, EnableNodeCliInspectArguments, and other settings, and can be exploited via r3ggi/ electroniz3r...