hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: GHSA-WW4J-C2RQ-47Q8...

Command injection in ts-process-promises

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js...

K7 Computing Pvt K7AntiVirus Premium 缓冲区错误漏洞

K7AntiVirus Premium is a security suite from K7 Computing that provides reliable protection against online threats and fraudulent activities, thus protecting you from viruses and cyber attacks. A memory leak vulnerability exists in K7TSMngr.exe in K7 Computing K7AntiVirus Premium 15.1.0.53. No...

CVE-2020-7784

CVE-2020-7784 affects all versions of the npm package ts-process-promises. The exposed vulnerability is a command-injection flaw located at line 45 of the main entry lib/process-promises.js. A PoC demonstrates exploitation via requiring ts-process-promises and invoking exec (e.g., a.exec("touch J...

CVE-2020-7784 command_injection

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:...

CVE-2020-7784

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:...

CVE-2020-7784

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:...

CVE-2020-7784: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:...

PT-2021-12661

Name of the Vulnerable Software and Affected Versions: ts-process-promises versions all Description: The issue affects the ts-process-promises package, with the injection point located in line 45 of the main entry in lib/process-promises.js. Recommendations: For ts-process-promises versions all, ...

PT-2020-17593

Name of the Vulnerable Software and Affected Versions va-ts crate versions prior to 0.0.4 Description The issue arises from the Demuxer implementation in the va-ts crate, which lacks a required T: Send bound. This omission allows sending a non-Send type T across thread boundaries, potentially...

Prototype Pollution in badopcode/nodash

Description ts-nodash is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var merge = require"ts-nodash".Merge const payload = JSON.parse'"proto":"polluted":"Yes! Its Polluted"'; var obj = console.log"Before : " + .polluted; mergeobj, payload;...

Qnap Systems Cross-Site Scripting Vulnerability in Multiple Products

Qnap Systems QNAP QTS is a Turbo NAS operating system from Qnap Systems, China. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code TS-Lint Extension...

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: SNYK:JS-TSPROCESSPROMISES-1048334...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 45 in main entry of package in lib/process-promises.js. PoC var a =require"ts-process-promises"; a.exec"touch JHU",; Remediation There is no fixed version for ts-process-promises...

CentOS: Security Advisory for bpftool (CESA-2020:5023)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

QNAP Systems TS-870 Cross-Site Scripting Vulnerability (CNVD-2020-62488)

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of client data by the WEB application...

QNAP Systems TS-870 Command Injection Vulnerability (CNVD-2020-62934)

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A command injection vulnerability exists in the UserName of the Music Station for the file upload feature in the QNAP Systems TS-870 using firmware version 4.3.4.0486. An attacker could exploit this...

QNAP Systems TS-870 SQL Injection Vulnerability

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A security vulnerability exists in the QNAP Systems TS-870 using firmware version 4.3.4.0486. An attacker could exploit the vulnerability to use LIMIT and retrieve data...

QNAP Systems TS-870 Cross-Site Scripting Vulnerability

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of client data by the WEB application...