Mike McNeil

4 exploits Active since Jul 2020
CVE-2018-21036 WRITEUP HIGH WRITEUP
Sails.js < 1.0.0-46 - Denial of Service via Empty WebSocket Pathname
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
CVSS 7.5
CVE-2018-21036 WRITEUP HIGH WRITEUP
Sails.js < 1.0.0-46 - Denial of Service via Empty WebSocket Pathname
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
CVSS 7.5
CVE-2018-21036 WRITEUP HIGH WRITEUP
Sails.js < 1.0.0-46 - Denial of Service via Empty WebSocket Pathname
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
CVSS 7.5
CVE-2023-38504 WRITEUP HIGH WRITEUP
Sails < 1.5.7 - Denial of Service via Virtual Request
Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.
CVSS 7.5