53 matches found
Reverse_HTTPS_Bot
ReverseHTTPSBot 0.8 Descripción: Un troyano de acceso remoto https basado en Python para pruebas de penetración. El servidor está basado actualmente en NodeJS Requisitos del Bot: pip install requests pip install pyscreenshot Requisitos del Servidor: sh setup.sh para generar certificado autofirmad...
sockjs-dos-py
CVE-2020-7693: Meteor Se ha incluido una aplicación Meteor de demostración que ejecuta el sockjs vulnerable. Para probar el exploit en esta aplicación de demostración, instale Meteor desde https://www.meteor.com/install y luego: cd demo/ meteor Y luego apunte el objetivo del payload a...
CVE-2020-7693
CVE-2020-7693 Poc Nota: Confirmo que el payload para CVE-2020-7693 puede ejecutarse en un programa de Bug Bounty Descripción: El manejo incorrecto del encabezado Upgrade con el valor websocket provoca el bloqueo de los contenedores que alojan aplicaciones sockjs. Esto afecta al paquete sockjs...
CLSA-2026-1784856033 TuxCare security update for sockjs (1 CVE)
TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.18-tuxcare.1...
CLSA-2026-1776731780 TuxCare security update for sockjs (1 CVE)
TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.19-tuxcare.1...
Exploit for Improper Handling of Exceptional Conditions in Sockjs_Project Sockjs
CVE-2020-7693 Poc Note: I Confirm Payload for CVE-2020-76...
EUVD-2018-0494
Malware in sbrugna...
EUVD-2021-0832
Malware in sbrugna...
Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
GHSA-C9G6-9335-X697 Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
0726react (0.1.1), 0x0.icu.anima (0.1.0) +13088 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)
sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...
Cross-site scripting in SocksJS-node
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...
diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)
sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...
Automattic: Reflected XSS due to vulnerable version of sockjs
Summary: There is reflected XSS on .simperium.com. The bug exists due to a vulnerable version of sockjs library. Platforms Affected: simperium.com js.simperium.com Steps To Reproduce: 1. Visit https://simperium.com/sock/1/0/0/0/htmlfile?c=alert'XSS'// 2. You will see an alert message because of...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Mitigation There is no mitigation for this issue, the flaw can only be resolved by applying updates...
Denial Of Service (DoS)
sockjs is vulnerable to denial of service DoS. The vulnerability exists as the res.end gets called twice when improperly handling the Upgrade header with an incorrect URL...
SockJS Input Validation Error Vulnerability
SockJS is a browser JavaScript library . A security vulnerability exists in SockJS versions prior to 0.3.20, which stems from the program's failure to properly handle the Upgrade header. An attacker could exploit this vulnerability to cause the container hosting the sockjs application to crash...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
