Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 7:22 p.m.8 views

Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Veracode
Veracode
added 2021/03/12 2:5 a.m.22 views

Privilege Escalation

swagger-generator is vulnerable to privilege escalation. The use of method File.createTempFile allows an attacker to append the contents of the outputFolder, thereby leading to an execution of attacker controlled code if the code is written to this directory...

7CVSS4.1AI score0.00414EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/03/11 3:9 a.m.43 views

GHSA-PC22-3G76-GM6J Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS6.6AI score0.00414EPSS
SaveExploits1References3
Rows per page
Query Builder