node-vulnerable

node-vulnerable 此仓库是 Endor Labs EXPOSURE 的合成演示靶标 。 当前状态是刻意设计为可利用的 。EXPOSURE 将针对它报告可利用的判定。 跟踪的 CVE： CVE-2018-21268 — 通过 host 参数实现的 traceroute 命令注入。在此基线中可利用 （无输入验证）。无上游修复。 CVE-2018-3757 — 通过文件路径参数实现的 pdf-image 命令注入。在此基线中不可利用 （/render 路由在构造 PDFImage 之前会对路径进行正则校验）。无上游修复。 EXPOSURE 打开的演示 PR 会将...

GHSA-8J9V-QHP4-WV55 Node-Traceroute RCE Vulnerability

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...

OS Command Injection

node-traceroute is vulnerable to OS command injection. The Child.exec method accepts untrusted user input and allows an attacker to inject arbitrary OS commands after a newline character...