GitHub

a promise waiting stream ready

concat patch for Buffer in node < 0.8.

Digest access authentication header helper

get and set dotfile as a json config

Detect es6 features enable or not.

method override middleware for koa

Compile a Node.js project into a single file. Supports TypeScript, binary addons, dynamic requires.

murmurhash, support utf8 Buffer

Just pedding for callback.

Speeds controllable stream. You can control the downstream speed on your own.

Pipe ReadStream to a wormhole

The last console logger

A babel preset for Next Component.

Next components StyleLint config, following our style guide.

Unauthenticated Access to Uploaded Files

My CVEs collection

JSON event emitters for RPC (6kb)

PoC for the type confusion vulnerability in Mac's CMS that results in authentication bypass and administrator account takeover.

CVE-2024–27631 Reference

Me looking for Zenith

Personal conventional-changelog preset based on conventional-changelog-angular

Growl reporter for Jasmine BDD

Dataiku REST-API by default the software, allows anonymous access to functionality that allows an attacker to know valid users.

Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596)

Insert new object(s) to your json file without rewriting the whole file.

Details of CVE-2020-14292

Repository for tracking CVEs discovered during security assessments. Like the Jedi Archives, this collection documents vulnerabilities found across systems during penetration tests and security audits. May the secure code be with you.

A reflected cross-site scripting vulnerability in OpenWRT v18.06.2

Stored XSS in ReNgine <= 2.2.0 — public disclosure

CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure