5 matches found
CVE-2023-50643
CVE-2023-50643 CVE-2023-50643 An issue in Evernote for MacOS v.10.68.2 allows a remote, attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components There is a tool designed to automate the process of searching for vulnerabilities in electron:...
CVE-2025-51387: Improper Control of Generation of Code
The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...
CVE-2025-22136: Improper Control of Generation of Code
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...
CVE-2023-49314: Improper Control of Generation of Code
Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack...
Asana Desktop Security Vulnerability
Asana Desktop is a desktop body application. A security vulnerability exists in Asana Desktop version 2.1.0, which stems from insufficient protection against code injection via RunAsNode, EnableNodeCliInspectArguments, and other settings, and can be exploited via r3ggi/ electroniz3r...