28 matches found
MAL-2022-6538 Malicious code in textlint-checker-for-vuejs-jp-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c21eae78309ce5b4b1c69686fd2f5d09040ea07b938b6f0a380733599f94d2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross-site Scripting (XSS) - Stored in range-of-motion/budget
✍️ Description Stored xss using vue js 🕵️♂️ Proof of Concept 1. First goto your account and visit https://app.budgethq.com/transactions and create a transaction .\ During creation put bellow xss payload in Description field and save it .\ Now see xss is executed Payload ---...
Arbitrium-RAT - A Cross-Platform, Fully Undetectable Remote Access Trojan, To Control Android, Windows And Linux
Arbitrium is a cross-platform is a remote access trojan RAT, Fully UnDetectable FUD, It allows you to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding. It gives access to the local networks, you can use the targets as a HTTP proxy and access Router...
HorizontCMS File Upload Vulnerability
HorizontCMS is an open source, responsive content management system CMS built on Laravel 6, VueJs 2.6 and Bootstrap 3.4. HorizontCMS 1.0.0-beta is vulnerable to unrestricted file uploads. An attacker can exploit this vulnerability to upload PHP code via zip file and execute PHP files via HTTP GET...
Saferwall - A Hackable Malware Sandbox For The 21St Century
Saferwall is an open source malware analysis platform. It aims for the following goals: Provide a collaborative platform to share samples among malware researchers. Acts as a system expert, to help researchers generates an automated malware analysis report. Hunting platform to find new malwares...
Starkiller - A Frontend For PowerShell Empire
Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. If you'd like to contribute please follow the Contribution guide. Getting Started To run Starkiller, you can download the installers for Mac, Linux, and Windows on the Releases page. For more info on...
Cross-Site Scripting (XSS)
vuejs is susceptible to cross-site scripting XSS attacks. The attacks are possible because it does not escape the value string in the renderAttr function in src/platforms/web/server/modules/attrs.js, allowing a malicious user to inject and execute arbitrary JavaScript...