EUVD-2018-0722

Malware in sbrugna...

GHSA-4Q2F-8G74-QM56 Cross-Site Scripting in takeapeek

All versions of takeapeek are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider usin...

Cross-Site Scripting

Overview All versions of takeapeek are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available...

Node.js third-party modules: [takeapeek] XSS via HTML tag injection in directory lisiting page

I was taking a peek at takeapeek module and found it is vulnerable to XSS via malicious injection in directory listing. It allows execution of arbitrary JS code. Module module name: takeapeek version: 0.2.2 npm page: https://www.npmjs.com/package/takeapeek Module Description A simple static...

Path Traversal

Overview All versions of takeapeek are vulnerable to path traversal exposing files and directories. Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server. References - HackerOne Report - Node.js Security-wg - GitHub...

Path Traversal in takeapeek

All versions of takeapeek are vulnerable to path traversal exposing files and directories. Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server...

Path traversal

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

CVE-2018-16473 affects the takeapeek Node.js module with versions ≤ 0.2.2. A path traversal vulnerability allows an attacker to list directories and files on the webserver by crafting requests that traverse the filesystem (e.g., using ../../.. paths). Public disclosures from NVD, Node.js advisory...