Server-side Request Forgery (SSRF)

Overview org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the API endpoints /api/gen/clients/language and /api/gen/servers/framework...

XML Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to XML Injection via the processing of specially crafted XML content. An attacker can read arbitrary files on the system by injecting malicious XML...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the host field, due to passing unsanitized user-supplied input to the command line. Remediation There is no fixed version for karo. References - Advisory...

Sandbox Bypass

Overview safe-eval is a Safer version of eval Affected versions of this package are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution "RCE"...

PT-2023-10378 · Canonical +4 · Linux +52

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The candidate number is rejected and should not be used. It was in a CNA pool that was not assigned to any issues during 2017. Recommendations: At the moment, there is no...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation. PoC js const BluetoothSerialPort = require"node-bluetooth-serial-port" const serial = new BluetoothSerialPort.BluetoothSerialPort...

Arbitrary Code Execution

Overview swig-templates is an A simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig. Affected versions of this package are vulnerable to Arbitrary Code Execution via the renderFile method. Note: The following conditions are required to...

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. PoC javascript const clone =...

PT-2023-10201 · Unknown · Iish Nlgis2

Name of the Vulnerable Software and Affected Versions: IISH nlgis2 affected versions not specified Description: A critical issue was found in IISH nlgis2, affecting an unknown functionality of the file scripts/etl/custom import.pl. This issue leads to sql injection. Recommendations: To fix this...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the getFact function due to improper input sanitization. PoC js var root = require"puppet-facter" root.getFact"& touch JHU",function, Remediation There is no fixed version for puppet-facter. References - Vulnerable...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the connect function due to improper input sanitization. PoC js var wifey = require'wifey'; wifey.init; wifey.connect"ssid": "';touch EXPLOITED;"; Remediation There is no fixed version for wifey. Credit: JHU System...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the boxAdd function due to improper input sanitization. PoC js vagrant = require"vagrant.js"; vagrant.boxAdd";touch EXPLOITED;", "", functionboxArr, stderr; Remediation There is no fixed version for vagrant.js...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the info method due to improper input sanitization. PoC js const smartctl = require'smartctl'; smartctl.info';touch EXPLOITED;', function; Remediation There is no fixed version for smartctl. References - Vulnerable...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization. PoC js var r = require"semver-tags" opt = "repoType":"git","repoPath":"";touch EXPLOITED;"" finalCb = console.log ropt,finalCb Remediation There is...

Command Injection

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Command Injection via the getRemotePackageInfo function due to improper input sanitization. PoC js var root = require"get-global-packages" root.getRemotePackageInfo"name":"& touch JHU &"...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization. PoC js var root = require"create-choo-electron" root.devInstall"./","& touch JHU",function Remediation There is no fixed version for...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization. PoC js var root =require"create-choo-app3" root.devInstall"./","& touch JHU",function Remediation There is no fixed version for create-choo-app3...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the execute function due to improper user-input sanitization. PoC js var root =require"abacus-ext-cmdline" root.execute'"& touch JHU &"' Remediation There is no fixed version for abacus-ext-cmdline. Credit: JHU...