GitHub

Use @std/esm (ES modules, import, export for Node v6) with less boilerplate.

Find a common prefix between two Array-like containers (arrays, strings, buffers, arguments), measure its length, slice it, strip it. Also concat two containers.

Filter reports from `generic-diff` or compatible modules to give changes with optional context.

If your collection is missing the slot you want to work with, have it be created on the fly. Simple edition, aimed to be small and fast.

Lookup an object property only if it's its own property.

Helps me write testable documentation.

Alias package for the latest CommonJS version of p-each-series

Evil eval() in a promise, with the stack cut.

Re-throw unhandled promise rejections in the next turn, so other listeners get a chance to also run.

Save one level of indentation in scripts that won't do anything anyway until they've read all of stdin.

String(x) with fallback to Object.prototype.toString.call(x)

ESLInt Sharable Config to suit my own taste

Extend objects easily in node.js

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code.

CrushFTP before 11.3.7_60 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitzations leading to HTML Injection.

Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /classes/Login.php Due to invalid Content-Type

Privilege escalation vulnerability in Nous W3 Smart WiFi Camera (Firmware 1.33.50.82)

📝A simple and elegant markdown editor, available for Linux, macOS and Windows.

Grunt plugin for checking for circular dependencies in AMD or CommonJS modules using Madge.

Searching, Routing Biketrails app with Python, Django, Postgres, Postgis, and pgRouting.

douhao

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

This repository mainly records of the details of vulnerability discovery.

A stored cross-site scripting (XSS) vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field.

Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.get_value API endpoint.

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters.

Rails CRM Engine

modularis ESLint config