CVE-2023-50473

Cross-Site Scripting XSS vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information via fixed session identifiers SID in index.js file...

CVE-2023-48238

joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens JWT which are a compact URL-safe means of representing claims to be transferred between two parties. Versions prior to 4.0.0 are vulnerable to a JWT algorithm confusion attack. On line 86 of the 'index.js'...

CVE-2023-48238: Insufficient Verification of Data Authenticity

joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens JWT which are a compact URL-safe means of representing claims to be transferred between two parties. Versions prior to 4.0.0 are vulnerable to a JWT algorithm confusion attack. On line 86 of the 'index.js'...

Regular Expression Denial Of Service (ReDoS)

get-func-name is vulnerable to Regular Expression Denial Of Service. The vulnerability is due to the getFuncName function in index.js not properly checking the functionSource size and length. which allows an attacker to trigger a DOS attack by using an input like '\t'.repeat54773 + '\t/function/i...

Denial Of Service (DoS)

nodebb is vulnerable to Denial Of Service. The vulnerability is due to the onMessage function in index.js as there is no validation when passing messages to the eventName.startsWith or eventName.toString methods, which can result in an application crash when the message contains an array or objec...

Path Traversal

m.static is vulnerable to Path Traversal. The vulnerability exists due to the improper path sanitization in the requestFile parameter in the requestListener function of index.js, which allows an attacker to access files outside the expected directory through relative paths...

CVE-2023-26820

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

CVE-2023-26820

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

Path traversal

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

CVE-2023-26820

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

CVE-2023-26820

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

CVE-2023-26820: Improper Limitation of a Pathname to a Restricted Directory

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js...

CVE-2023-26820

CVE-2023-26820 affects siteproxy v1.0; a path traversal vulnerability exists in the index.js component. The NVD/CNA metrics assign a high impact to confidentiality (C:H) with network access, low attack complexity, and no user interaction. There is no public exploit detail provided in the document...

siteproxy 路径遍历漏洞

siteproxy is a reverse proxy for netptop individual developers. A security vulnerability exists in siteproxy v1.0, which stems from a path traversal problem in the component index.js...

dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

GHSA-RMHG-2CVV-Q7VX dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

Design/Logic Flaw

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...