GHSA-GWG9-RGVJ-4H5J Code Injection in morgan

Verisons of morgan before 1.9.1 are vulnerable to code injection when user input is allowed into the filter or combined with a prototype pollution attack. Recommendation Update to version 1.9.1 or later...

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

CVE-2019-5413

CVE-2019-5413 affects the Node.js middleware package morgan (

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

PT-2019-17649

Name of the Vulnerable Software and Affected Versions morgan versions prior to 1.9.1 Description The issue allows an attacker to inject arbitrary commands. This can occur when user input is allowed into the filter or combined with a prototype pollution attack. Recommendations For versions prior t...

CVE-2019-5413: Improper Control of Generation of Code

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan 1.9.1...

Code Injection

Overview Verisons of morgan before 1.9.1 are vulnerable to code injection when user input is allowed into the filter or combined with a prototype pollution attack. Recommendation Update to version 1.9.1 or later. References - HackerOne Report - Node.js security-wg - GitHub Advisory...

Prototype Pollution

morgan is vulnerable to prototype pollution. A lack of object validation allows an attacker to inject arbitrary commands...

Node.js third-party modules: Code Injection Vulnerability in morgan Package

I would like to report a code injection vulnerability in morgan. It allows an attacker to inject arbitrary JS commands in certain situations. Module module name: morgan version: 1.9.0 npm page: https://www.npmjs.com/package/morgan Module Description HTTP request logger middleware for node.js Name...

morgan-funeralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-658384 Description| Value ---|--- Affected Website:| morgan-funeralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

morgan-multimedia.fr XSS vulnerability

Open Bug Bounty ID: OBB-567962 Description| Value ---|--- Affected Website:| morgan-multimedia.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

morgan-motor.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-548237 Description| Value ---|--- Affected Website:| morgan-motor.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

morgan-motor.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-544233 Description| Value ---|--- Affected Website:| morgan-motor.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

J.P. Morgan ACCESS Mobile - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application J.P. Morgan ACCESS Mobile published at the 'play' market has multiple vulnerabilities...

J.P. Morgan Mobile - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application J.P. Morgan Mobile published at the 'play' market has multiple vulnerabilities...

webmail.morgan-county.net XSS vulnerability

Vulnerable URL: http://webmail.morgan-county.net/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Morgan Stanley Research - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Morgan Stanley Research published at the 'play' market has multiple vulnerabilities...