415 matches found
MAL-2022-4111 Malicious code in karma-puppeteer-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3005f3e78365cd21829f8d44afc5bea7c2d6cb80bcc07951b1a59d5294fbe76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-coverage-coffee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4108 Malicious code in karma-coverage-coffee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
karma input validation error vulnerability
karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...
Open Redirect
karma is susceptible to open redirect attacks. The attack exists because the returnurl query parameter is not properly validated, allowing an attacker to inject a malicious URL through to the system...
Open redirect in karma
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
GHSA-RC3X-JF5G-XVC5 Open redirect in karma
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
Open redirect
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
Summary: Karma (JavaScript test runner) before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter. Affected component: karma
CVE-2021-23495 Open Redirect
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
UIkarma 输入验证错误漏洞
karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...
karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
Open Redirect
Overview karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. Affected versions of this package are vulnerable to Open Redirect due to missing validation of the returnurl query parameter. Remediation Upgrade karma to version 6.3.16 or higher. References -...
karma cross-site scripting vulnerability
Karma is a simple tool. Allows JavaScript code to be executed in multiple real browsers. karma has a cross-site scripting vulnerability that stems from the DOM in NPM karma. no details of the vulnerability are currently available...