370 matches found
NodeBB 安全漏洞
NodeBB is a forum system from the Design Create Play team built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability exists in NodeBB v4.3.0, which stems from improperly cleaned search query parameters in the search-categories API...
CVE-2025-50979
NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...
CVE-2025-50979
CVE-2025-50979 affects NodeBB v4.3.0 with a SQL injection in the /api/v3/search/categories endpoint due to an unsanitized search parameter. Unauthenticated, remote attackers can use boolean-based blind and PostgreSQL error-based payloads. Impact: high confidentiality, low integrity, low availabil...
PT-2025-34905 · Nodebb · Nodebb
Name of the Vulnerable Software and Affected Versions: NodeBB version 4.3.0 Description: NodeBB version 4.3.0 contains a SQL injection issue in the search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, potentially allowing unauthenticated,...
CVE-2025-50979
NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...
CVE-2025-50979
NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...
Malicious code in @zalastax/nolb-nodebb-p (npm)
The package @zalastax/nolb-nodebb-p was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-r (npm)
The package @zalastax/nolb-nodebb-plugin-r was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-f (npm)
The package @zalastax/nolb-nodebb-f was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb- (npm)
The package @zalastax/nolb-nodebb- was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-d (npm)
The package @zalastax/nolb-nodebb-plugin-d was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-a (npm)
The package @zalastax/nolb-nodebb-a was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-2 (npm)
The package @zalastax/nolb-nodebb-plugin-2 was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)
The package @zalastax/nolb-nodebb-plugin-z was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-h (npm)
The package @zalastax/nolb-nodebb-plugin-h was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-c (npm)
The package @zalastax/nolb-nodebb-plugin-c was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-plugin-k (npm)
The package @zalastax/nolb-nodebb-plugin-k was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-m (npm)
The package @zalastax/nolb-nodebb-m was found to contain malicious code...