58 matches found
EUVD-2025-64550
Malicious code in determinedleoponz3n npm...
EUVD-2025-54909
Malicious code in determined-tan-hippopotamus npm...
EUVD-2025-60204
Malicious code in determinedwildfowlz3n npm...
EUVD-2025-60205
Malicious code in determinedturkeyz3n npm...
PT-2025-16509 · Unknown · Macro Calculator With Admin Email Optin & Data
Name of the Vulnerable Software and Affected Versions: NotFound Macro Calculator with Admin Email Optin & Data versions n/d through 1.0 Description: The issue concerns exposure of sensitive system information to an unauthorized control sphere. This problem affects the Macro Calculator with Admin...
PT-2025-5003 · Mfplugin · Mfplugin
Name of the Vulnerable Software and Affected Versions: MFPlugin versions n/a through 1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also stor...
VulnCheck KEV: CVE-2023-43177
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmuconfiggovparams method of the TBD module, which may result in out-of-bounds writes...
CVE-2023-43177
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...
CVE-2023-43177
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...
Design/Logic Flaw
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...
Google Pixel Buffer Error Vulnerability
Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the TBD component and a possible stack buffer overflow. This could lead to remote code execution without additional execution privileges...
CVE-2023-0574 Server-Side Request Forgery
Server-Side Request Forgery SSRF, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communicati...
Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype...
Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks...
Exploit for Prototype Pollution in Apache Struts
What's this This is a Simple test Project for S2-059 which ca...