50 matches found
Reverse_HTTPS_Bot
ReverseHTTPSBot 0.8 Description: A python based https remote access trojan for penetration testing. Server is currently NodeJS based Bot Requires: pip install requests pip install pyscreenshot Server Requires: sh setup.sh to generate self signed certificate and key for testing sudo npm install...
sockjs-dos-py
CVE-2020-7693: Meteor...
CVE-2020-7693
CVE-2020-7693 Poc Note: I Confirm Payload for CVE-2020-7693 can running in Bug Bounty Program Description: Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Single Request Crashes Serve...
CLSA-2026-1784856033 TuxCare security update for sockjs (1 CVE)
TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.18-tuxcare.1...
CLSA-2026-1776731780 TuxCare security update for sockjs (4 CVEs)
TuxCare rebuilt sockjs to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...
Exploit for Improper Handling of Exceptional Conditions in Sockjs_Project Sockjs
CVE-2020-7693 Poc Note: I Confirm Payload for CVE-2020-76...
EUVD-2018-0494
Malware in sbrugna...
EUVD-2021-0832
Malware in sbrugna...
Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
GHSA-C9G6-9335-X697 Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
0726react (0.1.1), 0x0.icu.anima (0.1.0) +13092 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)
sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...
Cross-site scripting in SocksJS-node
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...
diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)
sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...
Automattic: Reflected XSS due to vulnerable version of sockjs
Summary: There is reflected XSS on .simperium.com. The bug exists due to a vulnerable version of sockjs library. Platforms Affected: simperium.com js.simperium.com Steps To Reproduce: 1. Visit https://simperium.com/sock/1/0/0/0/htmlfile?c=alert'XSS'// 2. You will see an alert message because of...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Mitigation There is no mitigation for this issue, the flaw can only be resolved by applying updates...
Denial Of Service (DoS)
sockjs is vulnerable to denial of service DoS. The vulnerability exists as the res.end gets called twice when improperly handling the Upgrade header with an incorrect URL...
SockJS Input Validation Error Vulnerability
SockJS is a browser JavaScript library . A security vulnerability exists in SockJS versions prior to 0.3.20, which stems from the program's failure to properly handle the Upgrade header. An attacker could exploit this vulnerability to cause the container hosting the sockjs application to crash...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
