crstaicu

2 exploits Active since Mar 2019

CVE-2019-5413 NOMISEC CRITICAL TROJAN

morgan < 1.9.1 - Remote Code Execution via Format Parameter Injection

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

CVSS 9.8

View Code

CVE-2019-5414 NOMISEC HIGH SUSPICIOUS

kill-port < 1.3.2 - Command Injection

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.

CVSS 8.1

View Code