unSafe.sh - 不安全

CVE-2023-38546: cookie injection with none file 2023-10-11 14:38:56 | 阅读: 9 | 收藏 |

CVE-2023-38545: socks5 heap buffer overflow 2023-10-11 14:38:42 | 阅读: 9 | 收藏 |

Limited path traversal in Node.js SDK leads to PII disclosure 2023-10-10 18:0:6 | 阅读: 5 | 收藏 |

RCE of Burp Scanner / Crawler via Clickjacking 2023-10-10 16:24:46 | 阅读: 7 | 收藏 |

RCE and DoS in Cosmovisor 2023-10-10 10:34:16 | 阅读: 4 | 收藏 |

No Rate Limit in Login Page 2023-10-9 20:59:36 | 阅读: 4 | 收藏 |

Stored XSS in plan name field (Acronis Cyber Protect) 2023-10-9 17:49:11 | 阅读: 3 | 收藏 |

XSS from Mastodon embeds 2023-10-9 12:0:23 | 阅读: 9 | 收藏 |

(CVE-2023-32006) Permissions policies can impersonate other modules in using module.constructor.createRequire() 2023-10-9 00:43:58 | 阅读: 12 | 收藏 |

Context isolation bypass via nested unserializable return value 2023-10-8 03:47:54 | 阅读: 3 | 收藏 |

(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks 2023-10-8 02:55:42 | 阅读: 6 | 收藏 |

(CVE-2023-32004) Permission model bypass by specifying a path traversal sequence in a Buffer 2023-10-8 02:45:48 | 阅读: 6 | 收藏 |

OpenSSL engines can be used to bypass and/or disable the Node.js permission model 2023-10-8 02:27:53 | 阅读: 6 | 收藏 |

Previously created sessions continue being valid after 2FA activation 2023-10-7 23:25:11 | 阅读: 4 | 收藏 |

Draft report exposure via slack alerting system for programs 2023-10-6 16:34:38 | 阅读: 3 | 收藏 |

[ADMIN FEATURE ACCESS] Knowing The Competitors analytics of any company 2023-10-6 02:30:46 | 阅读: 2 | 收藏 |

[mysupport.informatica.com] - reflected XSS 2023-10-5 12:59:7 | 阅读: 3 | 收藏 |

Subdomain takeover of eideticker.mozilla.org 2023-10-5 03:3:42 | 阅读: 5 | 收藏 |

Subdomain takeover of google-cdn-delivery.dev.mozaws.net 2023-10-5 03:2:18 | 阅读: 5 | 收藏 |

Bypassing Garbage Collection with Uppercase Endpoint 2023-10-4 18:37:25 | 阅读: 4 | 收藏 |