daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7598 from projectdiscovery/release-prep 

updated names
patch-1
Prince Chaddha 2023-07-02 23:13:33 +05:30 committed by GitHub
parent c8865f547b a5d22b8684
commit 72cf85ac0e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
file/nodejs/express-lfr.yaml
View File

@ -1,7 +1,7 @@
id: express-lfr
info:
name: Express LFR
name: Express - Local File Read
author: me_dheeraj (https://twitter.com/Dheerajmadhukar)
severity: info
description: Untrusted user input in express render() function can result in arbitrary file read if hbs templating is used.

2
file/nodejs/generic-path-traversal.yaml
View File

@ -1,7 +1,7 @@
id: generic-path-traversal
info:
name: Generic Path Traversal
name: Generic - Path Traversal
author: me_dheeraj (https://twitter.com/Dheerajmadhukar)
severity: info
description: Untrusted user input in readFile()/readFileSync() can endup in Directory Traversal Attacks.

4
file/nodejs/tar-path-overwrite.yaml
View File

@ -1,7 +1,7 @@
id: tar-path-overwrite
id: tar-extraction
info:
name: Tar Path Overwrite
name: Path Injection Vulnerability in TAR Extraction
author: me_dheeraj (https://twitter.com/Dheerajmadhukar)
severity: info
description: Insecure TAR archive extraction can result in arbitrary path over write and can result in code injection.