qwik 代码注入漏洞

qwik is a micro web framework. A code injection vulnerability exists in versions prior to qwik 0.21.0. An attacker could exploit this vulnerability to perform a code injection attack...

CVE-2023-1283 Code Injection in builderio/qwik

Code Injection in GitHub repository builderio/qwik prior to 0.21.0...

RCE using bad deserialization

Description Qwik provides an extended serialization mechanism for exchanging data between the client and server. This allows for the serialization and deserialization of Date, Regex, Signal, Function and many other useful data types. The Function deserializer can be accessed using the...

Cross-Site Scripting (XSS)

@builder.io/qwik is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in render-ssr.ts, which allows an attacker to inject and execute arbitrary JavaScript...

@leifermendez/partytown-qwik (>=1.0.3, <=1.0.7), storybook-framework-qwik (0.0.1) potentially affected by CVE-2023-0410 via @builder.io/qwik (>=0.9.0, <=0.15.2)

@builder.io/qwik NPM version =0.9.0, =1.0.3, =1.0.7 - storybook-framework-qwik 0.0.1 Source cves: CVE-2023-0410 Source advisory: OSV:GHSA-HM7F-RQ7Q-J9XP...

@builder.io/qwik vulnerable to Cross-site Scripting

@builder.io/qwik prior to version 0.16.2 is vulnerable to cross-site scripting due to attribute names and the class attribute values not being properly handled...

CVE-2023-0410

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

qwik 跨站脚本漏洞

qwik is a micro web framework. A cross-site scripting vulnerability exists in versions prior to qwik 0.1.0-beta5. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2023-0410

CVE-2023-0410 affects builder.io/qwik prior to 0.1.0-beta5. The vulnerability is a Cross-site Scripting (XSS) issue caused by improper sanitization in render-ssr.ts, enabling injection and execution of arbitrary JavaScript. Multiple sources (NVD/Red Hat/OSV/Veracode/GHSA) confirm the same vector ...

CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

PT-2023-16248

Name of the Vulnerable Software and Affected Versions @builder.io/qwik versions prior to 0.16.2 @builder.io/qwik versions prior to 0.1.0-beta5 Description The issue is related to Cross-site Scripting XSS due to improper handling of attribute names and the class attribute values. Recommendations F...

Attributes are not properly handled leading to XSS

Description Attribute names and the class attribute values are not properly handled leading to XSS where a user can control either: + A class value + An attribute name. While this may not seem like a important security issue this weakness is not documented. One would assume the behaviour would...

Qwickmail Qwik-smtpd format string vulnerability

Format string vulnerability through HELO and hostname during logging to file...

qwik-smtpd format string

Advisory : H0tTurk- Product : qwik-smtpd latest version. Vendor : http://qwikmail.sourceforge.net/ Bug : format string vulnerability Vendor Status : Released Patch. http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch...

CVE-2004-1291

Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the adjacent localIP data buffer...

CVE-2004-1291

Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the adjacent localIP data buffer...

CVE-2004-1291

This CVE concerns a buffer overflow in the qwik-smtpd server. The vulnerability occurs when processing a long HELO command, which overwrites an adjacent localIP data buffer and enables remote attackers to use the server as an SMTP spam relay. Affected component: qwik-smtpd; root cause: input hand...

Qwik SMTP 0.3 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits =============================================== Qwik SMTP 0.3 Remote Root Format String Exploit =============================================== / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit...