CVE-2021-23358

launchqtcreator README QtCreator is very useful for certain tasks! When working on Qt projects, there are things I find Qt Creator invaluable for -just too convenient to use anything else (almost) I often use Visual Studio Code and QtCreator together when working on c++/gui projects

Default landing pages

Splash Default landing pages Contributing Ensure that NodeJS is installed If not, you can download it here Ensure that Git is installed Preparing the dev environment Clone the repository and enter the directory git clone githubcom/ghifari160/splash cd splash Install all dependencies for this project npm i

CVEcrystalyer CVE tool to help with getting CVE details needed for reporting Tool uses reitre-jshtml as input, it will parse all of the CVE-s and grab the details from NVD and print them in terminal for copy/paste /CVEcrystalyer -h -c NAME Single CVE | Multiple CVE-s separated with ',' -> -c CVE-XXX-XXXX,CV

Detection script for cve-2021-23358

Detection-script-for-cve-2021-23358 Detection script for cve-2021-23358 I have created a Detection script for CVE-2021-23358 , which will detect the vulnerable version of node underscore be it installed as an open-source tool or just the libraries are being used This script has three features, It will detect the versions of underscore from Using the direct npm command Version

Demonstrating the Arbitrary Code Injection vulnerability in Underscore v1.8.3

csec302-demo Demonstrating the Arbitrary Code Injection vulnerability in Underscore v183 Installation and running Clone repo: git clone Open repo and cd into /broken/underscore-183 Install required packages: npm i Run mainjs: node mainjs Testing Underscore 183 is vulnerable to arbitrary code injection via its template function, similarly to lodash The difference betwee