9 matches found
CVE-2022-28081
A reflected cross-site scripting XSS vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts...
CVE-2023-28081
creationtimestamp| type| source ---|---|--- 2023-05-19 02:32:38+00:00| seen| https://t.me/cibsecurity/64440...
CVE-2023-28081
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...
CVE-2023-28081
CVE-2023-28081 involves a bytecode optimization bug in the Hermes JavaScript engine (used by React Native). The flaw, present in Hermes builds prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81, can cause a use-after-free and enable arbitrary code execution via a carefully crafted payload. ...
CVE-2023-28081
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...
CVE-2023-28081
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...
CVE-2022-28081
creationtimestamp| type| source ---|---|--- 2022-05-04 18:35:00+00:00| seen| https://t.me/cibsecurity/41908...
CVE-2022-28081
The CVE-2022-28081 entry concerns a reflected XSS vulnerability in the arPHP software, specifically in the Query.php component of arPHP v3.6.0 . According to connected sources, the issue arises from improper handling of user-supplied data (lack of data validation and unsafe output in Query.php), ...
CVE-2022-28081
A reflected cross-site scripting XSS vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts...