This Metasploit module exploits a Regular Expression Denial of Service vulnerability in the npm module "ua-parser-js". Server-side applications that use "ua-parser-js" for parsing the browser user-agent string will be vulnerable if they call the "getOS" or "getResult" functions. This vulnerability was fixed as of version 0.7.16.
2a6aca049eca293add81b1cc8c3eb87e66a227f63aea60301cdd4683695b7500
This Metasploit module exploits a Denial of Service vulnerability in npm module "ws". By sending a specially crafted value of the Sec-WebSocket-Extensions header on the initial WebSocket upgrade request, the ws component will crash.
98c74f3c38dbd290cd2a78fbf6553eec160f9632be33088f3fad3c21cee03619