58 matches found
BIT-GITLAB-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
PT-2022-11323 · Unknown · Todo-Regex
Name of the Vulnerable Software and Affected Versions: todo-regex version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it matches crafted invalid TODO statements. This occurs because the regular expression used can be exploited to cause a...
MAL-2022-3413 Malicious code in google-cloud-node-todos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7d68d158b2d8227576311310c92e1617519102e1de332cda3854beaaa12043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in google-cloud-node-todos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7d68d158b2d8227576311310c92e1617519102e1de332cda3854beaaa12043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-792J-9WJ3-J634 Command injection in github-todos
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
Command injection in github-todos
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
Command injection
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
Github-Todos 操作系统命令注入漏洞
Github-Todos is used to convert Todo to Github issues by the French individual developer Nicolas Chambrier. A security vulnerability exists in naholyr github-todos 3.1.0, which stems from the range parameter of the hook subcommand being concatenated without any validation and used directly by the...
CVE-2021-44684
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the hook subcommand is concatenated without any validation, and is directly used by the exec function...
CVE-2021-44684
CVE-2021-44684 affects naholyr/github-todos 3.1.0. The range argument for the _hook subcommand is concatenated without validation and passed directly to exec, enabling potential command injection. No remediation details are provided in the supplied documents; monitor for patches/advisories.
The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...
CVE-2021-38151
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
Cross site scripting
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38151
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
Chikitsa Patient Management System 跨站脚本漏洞
Chikitsa Patient Management System is a software application. An open source patient management software that is fast, responsive and easy to use. A cross-site scripting vulnerability exists in Chikitsa Patient Management System version 2.0.0, which originates from XSS in the system's...
Galer - A Fast Tool To Fetch URLs From HTML Attributes By Crawl-In
A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Installation from Binary The installation is easy. You can download a prebuilt bina...