Hackerone vulnerabilities
470 CVEs and advisories name Hackerone as an affected vendor, newest first. Follow it as a feed.
- CVE-2017-16123welcomyzt is a simple file server.
- CVE-2017-16122cuciuci is a simple fileserver.
- CVE-2017-16121datachannel-client is a signaling implementation for DataChannel.js.
- CVE-2017-16120liyujing is a static file server.
- CVE-2017-16119Fresh is a module used by the Express.js framework for HTTP response freshness testing.
- CVE-2017-16118The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header.
- CVE-2017-16117slug is a module to slugify strings, even if they contain unicode.
- CVE-2017-16116The string module is a module that provides extra string operations.
- CVE-2017-16115The timespan module is vulnerable to regular expression denial of service.
- CVE-2017-16114The marked module is vulnerable to a regular expression denial of service.
- CVE-2017-16113The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.
- CVE-2017-16111The content module is a module to parse HTTP Content-* headers.
- CVE-2017-16110weather.swlyons is a simple web server for weather updates.
- CVE-2017-16109easyquick is a simple web server.
- CVE-2017-16108gaoxiaotingtingting is an HTTP server.
- CVE-2017-16107pooledwebsocket is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
- CVE-2017-16106tmock is a static file server.
- CVE-2017-16105serverwzl is a simple http server.
- CVE-2017-16104citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url
- CVE-2017-16103serveryztyzt is a simple http server.
- CVE-2017-16102serverhuwenhui is a simple http server.
- CVE-2017-16101serverwg is a simple http server.
- CVE-2017-16100dns-sync is a sync/blocking dns resolver.
- CVE-2017-16099The no-case module is vulnerable to regular expression denial of service.
- CVE-2017-16098charset 1.0.0 and below are vulnerable to regular expression denial of service.
- CVE-2017-16097tiny-http is a simple http server.
- CVE-2017-16096serveryaozeyan is a simple HTTP server.
- CVE-2017-16095serverliujiayi1 is a simple http server.
- CVE-2017-16094iter-http is a server for static files.
- CVE-2017-16093cyber-js is a simple http server.