Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:50 p.m.3 views

CVE-2021-34083

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

9.3CVSS6.7AI score0.00649EPSS
Exploits1References1
Wallarm Lab
Wallarm Lab
added 2023/11/15 6:46 p.m.19 views

FREE Cybersecurity Education Courses

Navigating the nuanced realm of digital defense doesn't need to feel like a herculean task. This section aims to shed light on the intricacies of digital defense and aid you in leveraging freely available Cybersecurity Learning Programs. Deciphering Digital Defense Digital defense, also referred ...

7.5AI score
Exploits0
Veracode
Veracode
added 2022/06/03 6:49 a.m.24 views

Command Injection

google-it is vulnerable to command injection. The vulnerability exists in the openInBrowser function in googleIt.js due to a lack of input sanitization which allows an attacker to inject and execute arbitrary codes...

8.1CVSS8.3AI score0.00649EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/06/03 12:0 a.m.19 views

GHSA-7XHV-MPJW-422F Command injection in google-it

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

8.1CVSS7.9AI score0.00649EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/06/03 12:0 a.m.20 views

Command injection in google-it

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

9.3CVSS7.7AI score0.00649EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/06/02 2:15 p.m.9 views

CVE-2021-34083

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

8.1CVSS8AI score
Exploits0References3
NVD
NVD
added 2022/06/02 2:15 p.m.13 views

CVE-2021-34083

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

9.3CVSS0.00649EPSS
Exploits1References3
Prion
Prion
added 2022/06/02 2:15 p.m.10 views

Open redirect

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

9.3CVSS7.9AI score0.00649EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Google-it 操作系统命令注入漏洞

Google-it is a simple library for converting Google search results to JSON output, and will soon offer interactive display options. A security vulnerability exists in Google-it version 1.6.2 and earlier, which stems from the fact that it allows its users to send a search query to Google and recei...

9.3CVSS7.9AI score0.00649EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/06/01 2:31 p.m.12 views

CVE-2021-34083

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially...

8.2AI score0.00649EPSS
Exploits1References3
CVE
CVE
added 2022/06/01 2:31 p.m.57 views

CVE-2021-34083

CVE-2021-34083 affects the Node.js package google-it . The issue is in the openInBrowser path (googleIt.js) where the result URL from Google is unsafely concatenated into a shell command, enabling potential remote code execution on the server. Affected versions: up to 1.6.2. The provided document...

9.3CVSS7.9AI score0.00649EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder