Hackerone vulnerabilities
470 CVEs and advisories name Hackerone as an affected vendor, newest first. Follow it as a feed.
- CVE-2017-16059mssql-node was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16058gruntcli was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16057nodemssql was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16056mssql.js was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16055`sqlserver` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16054`nodefabric` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16053`fabric-js` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16052`node-fabric` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16051`sqliter` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16050`sqlite.js` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16049`nodesqlite` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16048`node-sqlite` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16046`mariadb` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16045`jquery.js` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16044`d3.js` was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16043Shout is an IRC client.
- CVE-2017-16042Growl adds growl notification support to nodejs.
- CVE-2017-16041ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.
- CVE-2017-16040gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM atta
- CVE-2017-16039`hftp` is a static http or ftp server `hftp` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pl
- CVE-2017-16038`f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../"
- CVE-2017-16037`gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in th
- CVE-2017-16036`badjs-sourcemap-server` receives files sent by `badjs-sourcemap`.
- CVE-2017-16035The hubl-server module is a wrapper for the HubL Development Server.
- CVE-2017-16031Socket.io is a realtime application framework that provides communication via websockets.
- CVE-2017-16030Useragent is used to parse useragent headers.
- CVE-2017-16029hostr is a simple web server that serves up the contents of the current directory.
- CVE-2017-16028react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native.
- CVE-2017-16026Request is an http client.
- CVE-2017-16025Nes is a websocket extension library for hapi.