23 matches found
CVE-2024-23738
CVE-2024-23738 macOS의 Postman 10.22 이하 버전에서 발생하는 문제로, 원격 공격자가 RunAsNode 및 enableNodeClilnspectArguments 설정을 통해 임의 코드를 실행할 수 있습니다. electron에서 취약점을 검색하는 프로세스를 자동화하도록 설계된 도구가 있습니다: https://github.com/r3ggi/electroniz3r 이 도구를 사용하면 앱이 취약한지 확인할 수 있습니다: 검증 후에는 코드를 주입하여 셸을 얻을 수 있습니다 셸을 즐기세요 :...
CVE-2024-23740
CVE-2024-23740 macOS에서 Kap 3.6.0 이하 버전의 문제로 인해 원격 공격자가 RunAsNode 및 enableNodeClilnspectArguments 설정을 통해 임의 코드를 실행할 수 있습니다. Electron의 취약점 검색 과정을 자동화하는 도구가 있습니다: https://github.com/r3ggi/electroniz3r 이 도구를 사용하여 앱이 취약한지 확인할 수 있습니다: 유효성 확인 후, 코드를 삽입하여 셸을 얻을 수 있습니다 셸을 즐기세요 :...
CVE-2024-23741
CVE-2024-23741 macOS에서 Hyper 3.4.1까지의 문제로 인해 원격 공격자가 RunAsNode 및 enableNodeClilnspectArguments 설정을 통해 임의 코드를 실행할 수 있습니다. electron에서 취약점을 검색하는 프로세스를 자동화하도록 설계된 도구가 있습니다: https://github.com/r3ggi/electroniz3r 이 도구를 사용하면 앱이 취약한지 확인할 수 있습니다: 검증 후, 코드를 주입하여 셸을 얻을 수 있습니다 셸을 즐기세요 :...
@cognidesk/integration-ticketing-servicenow (>=0.0.4, <=0.0.6), @darthcav/ts-http-server (0.9.1) +16 more potentially affected by CVE-2026-7120 via @fastify/static (>=10.1.0, <=10.1.1)
@fastify/static NPM version =10.1.0, =0.0.4, =3.1.17, =1.3.8, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =5.1.0, =6.5.2, =4.6.0, =4.8.4 and more Source cves: CVE-2026-7120 Source advisory: OSV:GHSA-8PVW-JCV7-9CMJ...
Malicious code in env-node-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1b6f1e45cba2962a0ff258e15bc55427bc91725fb41409442324f1a19cf520 The package env-node-cli was found to contain malicious code...
MAL-2026-2364 Malicious code in env-node-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1b6f1e45cba2962a0ff258e15bc55427bc91725fb41409442324f1a19cf520 The package env-node-cli was found to contain malicious code...
MAL-2026-1802 Malicious code in node-cli-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7df6bef20ed41b1a5c7e3ca57da4665f799cfcc6d6cf27b6dc87f8fa0560bc The package node-cli-dotenv was found to contain malicious code...
Malicious code in dotenv-node-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...
MAL-2026-1713 Malicious code in dotenv-node-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...
EUVD-2019-0240
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2016-10538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file...
CVE-2025-51387
The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...
CVE-2024-25249
An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...
Duplicate Advisory: Node CLI Allows Arbitrary File Overwrite
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6cpc-mj5c-m9rq. This link is maintained to preserve external references. Original Description An issue exists in node-cli 0.1.0 through 0.11.3 due to predictable temporary file names in lockfile and logfile, whi...
GHSA-3MRP-QHCJ-MWV5 Duplicate Advisory: Node CLI Allows Arbitrary File Overwrite
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6cpc-mj5c-m9rq. This link is maintained to preserve external references. Original Description An issue exists in node-cli 0.1.0 through 0.11.3 due to predictable temporary file names in lockfile and logfile, whi...
CVE-2016-10538
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...
CVE-2016-10538
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...
CVE-2016-10538
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...
Design/Logic Flaw
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...