search

aszx87410 / writeups-review

1 stars 0 forks source link

tar, 壓縮, symlink #14

Open aszx87410 opened 3 years ago

aszx87410 commented 3 years ago

值得找時間好好研究，之前 cdnjs 也是相關的洞

5 RCEs in npm for $15,000 https://robertchen.cc/blog/2021/09/20/npm-rce

aszx87410 commented 3 years ago

https://portswigger.net/daily-swig/node-js-archives-serious-tar-handling-vulnerabilities-with-software-update