7 matches found
Codify-TJNULL-OSCP-
Hack The Box — Codify 通关解析 针对 Hack The Box 平台 Codify 靶机的完整渗透测试演练与通关解析。 📌 靶机信息 字段| 值 ---|--- 名称| Codify 操作系统| Linux 难度| 简单 关键概念| vm2 RCE（CVE-2023-30547）、SQLite 数据库枚举、Bcrypt 破解、Bash 通配符模式匹配滥用 🛠️ 摘要 / 攻击链 root@kitploit: Nmap Scan: Ports 22, 80, 3000 ➡️ Node.js Sandbox App vm2 Detected ⬇️...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory:...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: OSV:GHSA-6GR2-QH89-HXWM...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-46341 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-46341 Source advisory: OSV:GHSA-JWP7-WG77-3W9V...
Exploit for Injection in Vm2_Project Vm2
CVE-2023-30547 vm2 is a sandbox that can run untrusted code wi...
GHSA-2Q6W-RXF3-4WC9 Malicious Package in codify
Version 0.3.1 of codify contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.1 of this module is found installed you will want...
Malicious Package in codify
Version 0.3.1 of codify contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.1 of this module is found installed you will want...