cristianstaicu/SecBench.js

Issues

• `local-devices` mislabeled as code-injection

  #15 opened 2 months ago by ericcornelissen
  5

• Mismatch between listed vulnerabilities and available exploits for `code-injection`

  #21 opened 2 months ago by ericcornelissen
  0

• Packages mislabeled as arbitrary code execution

  #13 opened 2 years ago by icemonster
  4

• Package vulnerability - Sink call does not exist

  #12 opened 2 years ago by icemonster
  1

• `mobile-icon-resizer` proof of concept is incorrect

  #17 opened 2 months ago by ericcornelissen
  2

• `serialize-javascript` proof of concept is incorrect

  #20 opened 2 months ago by ericcornelissen
  0

• `mongo-parse` proof of concept is incorrect

  #19 opened 2 months ago by ericcornelissen
  1

• `jsen` proof of concept is incorrect

  #18 opened 2 months ago by ericcornelissen
  1

• `mixin-pro` proof of concept is incorrect

  #16 opened 2 months ago by ericcornelissen
  1

• Allowing multiple versions for the same package

  #8 opened 2 months ago by cristianstaicu
  0

• Remove sudo access and side-effects of tests

  #7 opened 2 months ago by cristianstaicu
  0

• Provide a way to run the suite in a sequential way

  #6 opened 2 months ago by cristianstaicu
  0

• [Injections and co.] Adapt Nikos' PoCs to our framework

  #5 opened 2 months ago by cristianstaicu
  0

• Scrape the fixed version for vulnerable packages

  #4 opened 2 months ago by cristianstaicu
  0

• [Path Traversal] Hook into the HTTP API to change the server's port

  #3 opened 2 months ago by cristianstaicu
  0

• [ReDoS] Fix the oracle

  #2 opened 2 months ago by cristianstaicu
  1

• Missing repository in the Dockerfile

  #14 opened a year ago by Simplewyl2000
  0

• Dealing with unpublished packages

  #9 opened 2 years ago by xiemaisi
  0