NodeJS 24.x – Path Traversal
# Exploit Title : NodeJS 24.x - Path Traversal
nodejs
nodejs 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
unzip-stream 0.3.1 – Arbitrary File Write
# Exploit Title: unzip-stream 0.3.1 - Arbitrary File Write
Numbas < v7.3 - Remote Code Execution
# Exploit Title: Numbas < v7.3 - Remote Code Execution
Node.JS – ‘node-serialize’ Remote Code Execution (3)
# Exploit Title: Node.JS - 'node-serialize' Remote Code Execution (3)
Node.JS – ‘node-serialize’ Remote Code Execution (2)
# Exploit Title: Node.JS - 'node-serialize' Remote Code Execution (2)
KeystoneJS < 4.0.0-beta.7 - Cross-Site Request Forgery
# Exploit Title: Application wide CSRF Bypass
KeystoneJS 4.0.0-beta.5 – Cross-Site Scripting
# Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated Stored XSS
KeystoneJS 4.0.0-beta.5 – CSV Excel Macro Injection
# Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated CSV Injection