Prototype Pollution

json-bigint is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto to cause a denial of service condition...

Node.js third-party modules: [json-bigint] DoS via `__proto__` assignment

I would like to report a DoS in json-bigint. It allows to cause denial of service using very limited input 70 bytes. Module module name: json-bigint version: 0.3.1 npm page: https://www.npmjs.com/package/json-bigint Module Description JSON.parse/stringify with bigints support. Based on Douglas...

Gen_Prime (>=0.1.0 <=1.1.9), anchor-token (>=0.0.1 <=0.3.0-alpha.1) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5 <=4.4.3)

bigint CARGO version =1.0.5, =0.1.0, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi =1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

RUSTSEC-2020-0025 bigint is unmaintained, use uint instead

The bigint crate is not maintained any more and contains several known bugs including a soundness bug; use uint instead...

bigint is unmaintained, use uint instead

The bigint crate is not maintained any more and contains several known bugs including a soundness bug; use uint instead...

perl-Math-BigInt bug fix and enhancement update

An update is available for perl-Math-BigInt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

perl-Math-BigInt bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2019:3529 perl-Math-BigInt bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Incorrect Calculation

Overview Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems. Recommendation Upgrade to version 0.6.2 or later. References GitHub Advisory...

Google Chrome V8 - Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write

!-- Since commit https://chromium.googlesource.com/v8/v8.git/+/c22bb466d8934685d897708119543d099b9d2a9a turbofan supports inlining calls to array.includes and array.indexOf. The logic of the function is roughly: 1. Check the set of possible Maps of the array type with...

ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...

Tftpd32 DNS服务器拒绝服务漏洞

BUGTRAQ ID: 53704 Tftpd32是Windows平台上的TFTP和DHCP服务器。 TFTPD32 4.00之前版本在实现上存在拒绝服务漏洞，DNS服务器绑定了UDP端口53，但没有验证域选项大小，在发送超过127个字符时，攻击者可利用此漏洞造成服务器崩溃。 0 TFTPD32 4.00 厂商补丁： TFTPD32 ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://tftpd32.jounin.net Proof Of Concept :...

ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ASPPortal use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-21\r\n"; print "- ASPPortal \r\n"; print "- -...

linux/x86 execve /bin/sh setreuid(12 12) 50 bytes

No description provided by source. / Linux/x86 An example of setregid, execve /bin/sh I used this in practise, hence the setregid12, 12; / include stdio.h char c0de = / main: / / setregid12, 12; / "\x29\xc0" / subl %eax, %eax / "\xb0\x47" / movb $71, %al / "\x29\xdb" / subl %ebx, %ebx / / Here's...