EUVD-2021-2519

Malware in sbrugna...

@nexgin/totaljsapplication (>=0.0.1 <=0.0.66) potentially affected by CVE-2023-30094 via total4 (=0.0.80)

total4 NPM version =0.0.80 is affected by a known vulnerability. The following packages have a transitive dependency on total4 and may be impacted: - @nexgin/totaljsapplication =0.0.1, =0.0.66 Source cves: CVE-2023-30094 Source advisory: OSV:GHSA-JJ45-24RW-V6JW...

Code Injection in total4

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

GHSA-G7MQ-RFJ2-25WQ Code Injection in total4

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

CVE-2021-23390

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

CVE-2021-23390

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

CVE-2021-23390 Arbitrary Code Execution

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

CVE-2021-23390

CVE-2021-23390 affects the total4 package (Node.js framework) up to versions prior to 0.0.43. The vulnerability enables Arbitrary Code Execution through the U.set() and U.get() functions, as detailed by multiple sources (Snyk PoC, GitHub advisory GHSA-g7mq-rfj2-25WQ, and OSV/NVD records). Practic...

CVE-2021-23390

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...

total.js代码注入漏洞

total.js is open source a framework developed using JavaScript for the Node.js platform. It can be used to develop web, desktop, service and IoT platforms. A security vulnerability exists in total.js, which stems from the package total4 in versions prior to 0.0.43 that is prone to executing...

Arbitrary Code Execution

Overview total4 is a framework for Node.js platform written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. It can be used as a web, desktop, service, or IoT application. Affected versions of this package are vulnerable to Arbitrary Code Execution via the U.set and...