192 matches found
PT-2026-3773
Name of the Vulnerable Software and Affected Versions Tenda AX-1803 version 1.0.0.1 Description The Tenda AX-1803 router contains a stack overflow in the ssid parameter of the form fast setting wifi set function. This issue allows attackers to cause a Denial of Service DoS by sending a crafted...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mismatch in the type of the get/set function of the sglsgenr variable, which could result in a global...
Ruijie RG-EW1800GX 安全漏洞
Ruijie RG-EW1800GX is a wireless router from Ruijie China. A security vulnerability exists in the Ruijie RG-EW1800GX that originates from unverified input to the moduleset function in the file /usr/local/lua/devsta/nbrcwmp.lua, which could lead to an OS command injection attack...
Prototype Pollution
spmrc is vulnerable to Prototype Pollution. The vulnerability is due to improper input validation in the set and config functions, which allows an attacker to supply a crafted payload to inject properties on Object.prototype, leading to denial of service DoS or other unexpected behaviors...
CVE-2025-60341
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
rollbar vulnerable to prototype pollution
Impact Prototype pollution potential with the utility function rollbar/src/utility.set. No impact when using the published public interface. If application code directly imports set from rollbar/src/utility and then calls set with untrusted input in the second argument, it is vulnerable to...
EUVD-2021-0882
Malware in sbrugna...
EUVD-2021-0947
Malware in sbrugna...
EUVD-2021-1116
Malware in sbrugna...
EUVD-2025-28140
Malicious code in bioql PyPI...
EUVD-2023-1098
Malicious code in bioql PyPI...
EUVD-2022-0866
Malicious code in bioql PyPI...
CVE-2025-26278
A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
Prototype Pollution
Overview dref is a deep object refs Affected versions of this package are vulnerable to Prototype Pollution via the lib.set function. An attacker can cause a denial of service by supplying a specially crafted payload. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype...
GHSA-76G8-235F-GJ6P dref is vulnerable to prototype pollution
A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2025-26278
A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2025-26278
CVE-2025-26278 describes a prototype pollution in dref v0.1.2 via the lib.set function, allowing an attacker to cause a Denial of Service. Affected component: dref (JavaScript library). Root cause: unsafe/object recursive merge or path-based pollution enabling properties to be injected into Objec...
PT-2025-39378
Name of the Vulnerable Software and Affected Versions dref version 0.1.2 Description A prototype pollution issue exists in the lib.set function. This allows attackers to potentially cause a Denial of Service DoS by providing a specially crafted payload. The issue involves manipulating the prototy...
dref 安全漏洞
dref is a DNS rebinding exploit framework open-sourced by F-Secure LABS. A security vulnerability exists in dref version 0.1.2, which stems from prototype contamination in the lib.set function and could lead to a denial-of-service attack...
