Lucene search
+L

37 matches found

GithubExploit
GithubExploit
added 2022/07/24 9:50 p.m.151 views

Exploit for SQL Injection in Prestashop Blockwishlist

!Contributorscontributors-shieldcontributors-url !Fork...

8.8CVSS7.6AI score0.2317EPSS
SaveExploits6
OSV
OSV
added 2022/06/20 8:11 p.m.8 views

MAL-2022-3062 Malicious code in fixer-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03586127d0f6a5b73a88127b68330d43a78f91cfb4e93944ec93e950ba96a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.6 views

Malicious code in fixer-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03586127d0f6a5b73a88127b68330d43a78f91cfb4e93944ec93e950ba96a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2021/04/13 3:19 p.m.46 views

GHSA-45W5-PVR8-4RH5 Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

9.8CVSS7AI score0.03039EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2021/04/13 3:19 p.m.49 views

Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

10CVSS5.2AI score0.03039EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/04/06 12:00 a.m.18 views

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.04238EPSS
SaveExploits1References2
Veracode
Veracode
added 2021/03/22 1:23 a.m.17 views

Arbitrary Code Execution

eslint-fixer is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization on the input to the childprocess.exec method...

9.8CVSS3.5AI score0.03039EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/03/19 12:15 a.m.12 views

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

9.8CVSS7.2AI score0.03039EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/03/19 12:15 a.m.6 views

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

10CVSS8.3AI score0.03039EPSS
SaveExploits1References3
CVE
CVE
added 2021/03/18 11:34 p.m.72 views

CVE-2021-26275

The CVE-2021-26275 entry concerns the eslint-fixer package for Node.js, up to version 0.1.5. The root cause is command injection via shell metacharacters in the fix() function, enabling arbitrary code execution. Affected software is eslint-fixer (maintained by ozum) with repository reportedly del...

10CVSS9.9AI score0.03039EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/18 12:00 a.m.12 views

PT-2021-16985 · Unknown · Eslint-Fixer

Name of the Vulnerable Software and Affected Versions: eslint-fixer versions 0.1.5 and earlier Description: The issue allows command injection via shell metacharacters to the fix function. This affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repositor...

10CVSS7.3AI score0.03039EPSS
SaveExploits1References8
Kitploit
Kitploit
added 2020/09/21 8:30 p.m.543 views

VMPDump - A Dynamic VMP Dumper And Import Fixer

A dynamic VMP dumper and import fixer, powered by VTIL. Works for VMProtect 3.X x64. Before vs After Usage VMPDump.exe "" -ep= -disable-reloc Arguments: : The ID of the target process, in decimal or hex form. : The name of the module which should be dumped and fixed. This can be an empty string "...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/05/26 12:00 a.m.32 views

Fedora Update for mediaconch FEDORA-2019-7155125125

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.7AI score
SaveExploits0References2
zdt
zdt
added 2011/09/13 12:00 a.m.16 views

All Media Fixer Pro Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote,...

6.8AI score
SaveExploits0
seebug.org
seebug.org
added 2007/07/17 12:00 a.m.42 views

Php168 v 4.0 sp global.php 写入漏洞

在global.php中有这样的代码: function loginlogs$username,$password global $timestamp,$onlineip; $logdb="$username\t$password\t$timestamp\t$onlineip"; @includePHP168PATH."cache/adminloginlogs.php"; $writefile="$value $jj++; $writefile.="\$logdb=\"$value\";"; if$jj200 break;...

7.1AI score
SaveExploits0
Atlassian
Atlassian
added 2007/03/27 7:41 a.m.21 views

Deleting a custom field which has an issue security scheme or permission scheme on it does not update the index and issue navigator is out of date

Similar to JRA-12410 - deleting a custom field does not adequately clean up after itself. Specifically, affected issues are not reindexed so the updated security and permission aspects are not reflected in search results which is a security hole. Note that a naive fix may produce performance...

0.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2007/03/27 7:41 a.m.24 views

Deleting a custom field which has an issue security scheme or permission scheme on it does not update the index and issue navigator is out of date

emphasized textSimilar to JRA-12410 - deleting a custom field does not adequately clean up after itself. Specifically, affected issues are not reindexed so the updated security and permission aspects are not reflected in search results which is a security hole. Note that a naive fix may produce...

0.3AI score
SaveExploits0
Rows per page
Query Builder