Malicious Package in s3asy

Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you will want ...

GHSA-3WJM-33MW-H388 Malicious Package in s3asy

Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you will want ...

Ming Buffer Overflow Vulnerability

Ming libming is a Flash SWF output library written in C language. A buffer overflow vulnerability exists in the 'decompileIF' function of the decompile.c file in Ming version 0.4.8, which originates when a networked system or product performs an operation in memory without properly validating the...

CVE-2020-11895

Ming aka libming 0.4.8 has a heap-based buffer over-read 2 bytes in the function decompileIF in decompile.c...

CVE-2020-11895

Ming aka libming 0.4.8 has a heap-based buffer over-read 2 bytes in the function decompileIF in decompile.c...

CVE-2020-11894

Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c...

UBUNTU-CVE-2020-11894

Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c...

CVE-2020-6629

Ming aka libming 0.4.8 has z NULL pointer dereference in the function decompileGETURL2 in decompile.c...

CVE-2020-6629

Ming aka libming 0.4.8 has z NULL pointer dereference in the function decompileGETURL2 in decompile.c...

Heap overflow

Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...

UBUNTU-CVE-2020-6629

Ming aka libming 0.4.8 has z NULL pointer dereference in the function decompileGETURL2 in decompile.c...

Null pointer dereference

Ming aka libming 0.4.8 has z NULL pointer dereference in the function decompileGETURL2 in decompile.c...

UBUNTU-CVE-2020-6628

Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...

CVE-2020-6628

Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...

libming null pointer dereference vulnerability (CNVD-2020-03262)

libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. A null pointer dereference vulnerability exists in the decompileGETURL2 function in decompile.c in libming 0.4.8. An attacker could exploit this vulnerability to cause a denial of service...

libming buffer overflow vulnerability (CNVD-2019-34592)

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A buffer overflow vulnerability exists in the 'OpCode' function of the decompile.c file of the libutil.a static link library in libming version 0.4.8, which can be exploit...

CVE-2019-10745

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...

CVE-2019-10745

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...

Design/Logic Flaw

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...

CVE-2019-10745

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...