616764 matches found
CVE-2021-32804
CVE-2021-32804 yamory 블로그 "CVE-2021-32804 npm에도 영향을 주는 node-tar의 경로 탐색 취약점"에서 사용한 Docker 환경을 구축하기 위한 레포지토리입니다. 환경 구축 docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash 취약점 재현 node-tar root@5e1af2148215:/poc node tar.js root@5e1af2148215:/poc su node Hello, world! npm...
ply_exploit_rejection
Ply 3.11 익스플로잇 기각 이 프로젝트는 CVE‑2025‑56005가 기각되어야 한다고 주장합니다. 논증 1: 개념 증명이 성공적으로 완료되지 않습니다 이 프로젝트에서는 개념 증명의 코드가 main.py로 복사되었습니다. 개념 증명 실행 익스플로잇을 실행하려면 uv를 설치했는지 확인하세요. 실행 uv sync 이 명령은 프로젝트 종속성으로 ply==3.11을 설치합니다. 실행 uv run main.py 이것은 개념 증명을 실행합니다. 이로 인해 프로그램은 AttributeError: 'function' object has...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE エクスプロイト expr-eval および expr-eval-fork npm パッケージにおける CVE-2025-12735 脆弱性を検出・テストするためのセキュリティ研究ツール。 ⚠️ 免責事項 このツールは許可されたセキュリティテストおよび教育目的のみ に使用してください。コンピュータシステムへの不正アクセスは違法です。所有しているシステム、または明示的な書面によるテスト許可を得たシステムでのみ使用してください。 📋 概要 CVE-2025-12735 は、expr-eval および expr-eval-fork npm...
CVE-2026-103251
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
EUVD-2026-90645
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
CVE-2026-103251
The software n8n versions before 1.123.80 , 2.39.6 , and 2.40.1 contains a validation bypass vulnerability in the community package installation handler specifically for queue mode deployments . An attacker with Redis write access can bypass name validation, permission checks, checksum verificati...
ROOT-APP-NPM-CVE-2026-46490 CVE-2026-46490 in samlify - Patched by Root
Root has patched CVE-2026-46490 in the samlify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47949 CVE-2025-47949 in samlify - Patched by Root
Root has patched CVE-2025-47949 in the samlify package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22739 CVE-2026-22739 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-22739 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42583 CVE-2026-42583 in io.netty:netty-codec - Patched by Root
Root has patched CVE-2026-42583 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-45536 CVE-2026-45536 in io.netty:netty-transport-native-epoll - Patched by Root
Root has patched CVE-2026-45536 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...
CLEANSTART-2024-MU53780 GNU Emacs through 28
Security vulnerability affects the emacs package. GNU Emacs through 28...
ROOT-APP-NPM-CVE-2026-77078 CVE-2026-77078 in multer - Patched by Root
Root has patched CVE-2026-77078 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-82333 CVE-2026-82333 in multer - Patched by Root
Root has patched CVE-2026-82333 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-5079 CVE-2026-5079 in multer - Patched by Root
Root has patched CVE-2026-5079 in the multer package for Root:npm. Multiple fixed versions available...
CVE-2026-86610
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...