EUVD-2019-0302

Malware in sbrugna...

EUVD-2019-0349

Malware in sbrugna...

EUVD-2021-1134

Malware in sbrugna...

CVE-2020-7603

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

com.basho.riak.hadoop:riak-hadoop (0.2), com.basho.riak:riak-client (>=0.14.0, <=1.0.5) +114 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-java (2.3.0)

com.google.protobuf:protobuf-java MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-java and may be impacted: - com.basho.riak.hadoop:riak-hadoop 0.2 - com.basho.riak:riak-client =0.14.0, =0.40, =0.40,...

closure-compiler:ParserFuzzer: Security exception in com.google.common.collect.RegularImmutableMap.makeImmutable

Detailed Report: https://oss-fuzz.com/testcase?key=5658996940603392 Project: closure-compiler Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanclosure-compiler Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

closure-compiler:ParserFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4782401204387840 Project: closure-compiler Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanclosure-compiler Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN...

com.basho.riak.hadoop:riak-hadoop (0.2), com.basho.riak:riak-client (>=0.14.0, <=1.0.5) +114 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-java (2.3.0)

com.google.protobuf:protobuf-java MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-java and may be impacted: - com.basho.riak.hadoop:riak-hadoop 0.2 - com.basho.riak:riak-client =0.14.0, =0.40, =0.40,...

GHSA-M647-5WF9-3JP3 OS Command Injection in closure-compiler-stream

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization...

OS Command Injection in closure-compiler-stream

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization...

OS Command Injection

closure-compiler-stream is vulnerable to OS command injection. The args options are passed to the exec function without any validation and sanitization, allowing an attacker to inject and execute arbitrary OS commands...

closure-compiler-stream injection vulnerability

closure-compiler-stream is a stream interface to a closure compiler. A security vulnerability exists in closure-compiler-stream version 0.1.15 and earlier, which stems from the program failing to perform any cleanup operations on the user-controllable 'options' parameter. An attacker could use th...

CVE-2020-7603

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

CVE-2020-7603

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

CVE-2020-7603

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

CVE-2020-7603

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

CVE-2020-7603

CVE-2020-7603 affects the Node.js module closure-compiler-stream (version 0.1.15 and earlier). The root cause is that the argument module’s exports function options parameter in index.js is controllable by users without sanitization, enabling arbitrary command execution. Multiple sources corrobor...

PT-2020-19649

Name of the Vulnerable Software and Affected Versions closure-compiler-stream versions 0.1.15 and earlier Description The issue allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization. Recommendations For...

CVE-2020-7603: Improper Neutralization of Special Elements used in an OS Command

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...

Command Injection

Overview closure-compiler-stream is a Streaming interface for closure compiler. Affected versions of this package are vulnerable to Command Injection. The argument options of the exports function in index.js can be controlled by users without any sanitization. PoC var root =...