GitHub

Record the vulnerabilities that have been discovered

setTimeout, but with arguments reversed.

Wraps child_process.exec, returning a promise.

Wraps fs.exists so callback is called with (err, result) instead of just (result).

A function that creates a Bluebird promise that can be resolved or rejected using a Node-style callback.

ESLint configuration for TypeScript

Publicly disclosed vulnerabilities I discovered in open source software

All the vulnerabilities that I have discovered and have a CVE assigned (Adhering to the corresponding Vulnerability Disclosure Policies).

Bosscms的漏洞提交issue

This repository contains information on all of the CVEs I found.

Some cves

Record

74cmsSE Arbitrary file read vulnerability analysis

Proof of Concept about a XSS Stored in SCM Manager 1.2 <= 1.60

Find items in file system for node fs module

List items in file system for node fs module

Additional methods and patches for node fs module

A wraper around the famous pickle package

This is a collection of Common Vulnerabilities and Exposures (CVEs) I discovered during security research and penetration testing activities on open source projects.

My CVE Publications

parse the test anything protocol