Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-5414. PoCs published by crstaicu.
AI-analyzed exploit summary The repository claims to be a PoC for CVE-2019-5414 but only contains a README.md file stating 'Fake repo'. No exploit code or technical details are provided.
Description
If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.
Exploits (1)
nomisec
SUSPICIOUS
by crstaicu · poc
https://github.com/crstaicu/CVE-2019-5414
The repository claims to be a PoC for CVE-2019-5414 but only contains a README.md file stating 'Fake repo'. No exploit code or technical details are provided.
Classification
Suspicious 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target:
unknown
No auth needed
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://hackerone.com/reports/389561
Scores
CVSS v3
8.1
EPSS
0.0051
EPSS Percentile
67.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
CWE-77
Status
published
Products (2)
kill-port_project/kill-port
< 1.3.2
npm/kill-port
0 - 1.3.2npm
Published
Mar 21, 2019
Tracked Since
Feb 18, 2026