8bitsec

CVE-2023-31874 EXPLOITDB HIGH text WORKING POC

Yank Note <3.52.1 - RCE

Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process').

CVSS 8.8

View Code

CVE-2023-31873 EXPLOITDB HIGH text WORKING POC

Gin 0.7.4 - RCE

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').

CVSS 7.8

View Code