39 matches found
Malicious code in kill-port (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8762d3a240cbf5a33e4b613b2ea601d5515824da362b82eed4b5095baa7b8c The package kill-port was found to contain malicious code. Source: ghsa-malware 12e6ea3a28f8e792e2cac11bd7aa1651eed2f77b6468a8d9aa43567dc9e95bbd Any...
EUVD-2025-199220
Malicious code in kill-port npm...
Embedded Malicious Code
Overview kill-port is a Kills the process running on given port. Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The...
EUVD-2019-0389
Malware in sbrugna...
EUVD-2022-6458
Malicious code in bioql PyPI...
CVE-2019-15609
The kill-port-process package version 2.2.0 is vulnerable to a Command Injection vulnerability...
mc-kill-port vulnerable to Arbitrary Command Execution via kill function
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
CVE-2022-25973
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
CVE-2022-25973 Arbitrary Command Execution
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
CVE-2022-25973
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
CVE-2022-25973
mc-kill-port is vulnerable to Arbitrary Command Execution via the kill function due to missing sanitization of the port argument. Affected versions (as described across multiple sources) expose an exploit path where an attacker can inject commands through the port parameter, enabling local comman...
CVE-2022-25973
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
mc-kill-port 参数注入漏洞
npm mc-kill-port is a package from npm USA that allows termination of ports. A security vulnerability exists in mc-kill-port, which stems from a lack of parameter cleanup. An attacker can exploit this vulnerability to execute arbitrary commands...
PT-2022-17621 · Unknown · Mc-Kill-Port
Name of the Vulnerable Software and Affected Versions: mc-kill-port versions all Description: The issue concerns Arbitrary Command Execution via the kill function due to missing sanitization of the port argument. This allows for potential exploitation. No information is provided about the estimat...
CVE-2022-25973: Improper Neutralization of Argument Delimiters in a Command
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...
Arbitrary Command Execution
Overview mc-kill-port is a package allowing termination of ports. Affected versions of this package are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument. PoC js const kill = require"mc-kill-port"; kill"abc|echo rce newFile.txt"...
@jatahworx/bhive-core (>=6.2.0-beta.0, <=7.1.0), aext-scripts (>=0.23.1, <=1.0.7) +6 more potentially affected by CVE-2019-15609 via kill-port-process (2.1.0)
kill-port-process NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on kill-port-process and may be impacted: - @jatahworx/bhive-core =6.2.0-beta.0, =0.23.1, =0.0.1, =0.0.1-test.0, =0.0.30, =0.0.29, =0.0.1, =1.5.0 Source cves: CVE-2019-156...
GHSA-XP4X-J9VH-C3WF OS Command Injection and Command Injection in kill-port-process
The kill-port-process package prior to version 2.2.0 is vulnerable to a Command Injection...