purplesyringa / kiwipedia Goto Github PK

检测到 imachug/Kiwipedia 一共引入了711个开源组件，存在58个漏洞

漏洞标题：Joyent Node.js macaddress模块命令注入漏洞
缺陷组件：[email protected]
漏洞编号：CVE-2018-13797
漏洞描述：Joyent Node.js是美国Joyent公司的一套建立在Google V8 JavaScript引擎之上的网络应用平台。macaddress module是使用在其中的一个Mac地址管理模块。
Joyent Node.js macaddress模块0.2.9之前版本中存在命令注入漏洞。攻击者可利用该漏洞注入任意的命令。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2018-13085
影响范围：(∞, 0.2.9)
最小修复版本：0.2.9
缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]>[email protected]>[email protected]
[email protected]>[email protected]>[email protected]>[email protected]>[email protected]>[email protected]

另外还有58个漏洞，详细报告：https://mofeisec.com/jr?p=i7532b

If there is launched a program where site owner can create scripts using visual event sheets (conditions/actions), making the programmation less hard, do you would consider moving your code to this?

Feature Add search engine for Firefox and Firefox based browser like Tor and IceCat.
How?: Here is an image of how another site implemented this:

Possibly also import article if not available on Kiwipedia but is available on Wikipedia.

Want to support this issue? Post a bounty on it! We accept bounties via BountySource.