CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2025-12135

WPBookit getparam'csscode'; $jscode= $request-getparam'jscode'; updateoption 'wpbcustomcodedata', 'csscode' = $csscode, 'jscode' = $jscode ; Codeausführung aus /core/shortcodes/cla...

js-jobs

js-jobs JS Job Manager 1.1.9 - Installazione/Attivazione non autenticata di plugin arbitrari Descrizione L'azione AJAX jsjobsajax del plugin, disponibile sia per utenti autenticati che non autenticati, non dispone di controlli di autorizzazione e CSRF adeguati, in particolare quando si utilizzano...

jsleak

jsleak jsleak è uno strumento per identificare dati sensibili nei file JS tramite pattern regex. Sebbene sia costruito per questo, puoi usarlo per identificare qualsiasi cosa purché tu abbia un pattern regex per essa. Come installare Direttamente: root@kitploit: your package manager install...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to Cryptographic Weakness in IBM Liberty Server ( CVE-2020-36732)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the cryptographic weakness vulnerability Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an intege...

cowcloud

CowCloud una soluzione serverless per distribuire carichi di lavoro in AWS CowCloud è stato originariamente creato per eseguire strumenti di ricognizione e scan di vulnerabilità in modo distribuito; per esempio, un caso d'uso potrebbe essere quello dei cacciatori di bug bounty. Questa soluzione è...

CVE-2026-2964-Lab

CVE‑2026‑2964 Lab – Prototype Pollution verso RCE Questo repository contiene un ambiente di laboratorio completo per CVE‑2026‑2964, una vulnerabilità di prototype pollution nella libreria web‑audio‑recorder‑js che può portare all'esecuzione remota di codice in condizioni specifiche. Il laboratori...

CVE-2021-41349

Microsoft Exchange Exploit CVE-2021-41349 Ausnutzung: CVE-2021-41349 Dieses Exploit-Tool erstellt ein Formular zum Posten von XSS-Payloads an den Ziel-Exchange-Server. Du musst ein js erstellen, das enthält, was du tun möchtest. Verwendung 1. Erstelle deinen js-Payload und lade ihn irgendwo hoch...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 ist eine kritische Schwachstelle CVSS 9.8 in PDF.js, die die Ausführung beliebigen JavaScript-Codes aufgrund unzureichender Typprüfungen des FontMatrix-Objekts in PDF-Dateien ermöglicht. CVE-2024-4367 Exploit-Assistent: Benutzerhandbuch CVE-KENNUNG|...

Malicious code in pybitjs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nodejs-grunt (UTSA-2026-093223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093223 advisory. The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load instead of its secure replacement safeLoad of...

CLSA-2026-1787592038 TuxCare security update for js-yaml (3 CVEs)

TuxCare rebuilt js-yaml to address 3 CVEs. Fixed in 3.15.0-tuxcare.1...

Astra Linux – Vulnerability in Node.js

A memory leak could occur when a remote peer abruptly closes the socket without sending a “GOAWAY” notification. Additionally, if an invalid header is detected by nghttp2, causing the connection to be terminated by the peer, the same memory leak will be triggered. This flaw could lead to increase...

SUSE CVE-2026-73643

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...

CVE-2026-77413

creationtimestamp| type| source ---|---|--- 2026-08-21 22:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtmrjjdpmb2m 2026-08-21 22:35:10+00:00| published-proof-of-concept| https://github.com/jsonata-js/jsonata/security/advisories/GHSA-8gq3-vp5j-2grp 2026-08-22...

Malicious code in @js-lib-team/env-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae761b7dd660e94dd99388dedf8c2227fa6a683e314468e7a482cd649c2e1a47 Package @js-lib-team/env-parser is advertised as an environment-variable parser but on require/import executes a top-level IIFE in index.js that read...

CVE-2026-61704

Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...