Lucene search
+L

91 matches found

CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•17 views

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmuconfiggovparams method of the TBD module, which may result in out-of-bounds writes...

8.4CVSS6.7AI score0.0009EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/18 12:15 a.m.•8 views

CVE-2023-43177

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...

9.8CVSS5.8AI score0.81801EPSS
SaveExploits7References2
NVD
NVD
•added 2023/11/18 12:15 a.m.•39 views

CVE-2023-43177

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...

9.8CVSS0.81801EPSS
SaveExploits7References2
Prion
Prion
•added 2023/11/18 12:15 a.m.•32 views

Design/Logic Flaw

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...

7.5CVSS7.1AI score0.81801EPSS
SaveExploits7References2Affected Software1
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•16 views

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the TBD component and a possible stack buffer overflow. This could lead to remote code execution without additional execution privileges...

9.8CVSS8.2AI score0.00426EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/09 2:55 p.m.•44 views

CVE-2023-0574 Server-Side Request Forgery

Server-Side Request Forgery SSRF, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communicati...

6.8CVSS9.8AI score0.00637EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2021/05/07 4:28 p.m.•84 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype...

8.8CVSS3.9AI score0.02044EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2021/05/07 4:16 p.m.•259 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks...

5.3CVSS5.9AI score0.01156EPSS
SaveExploits1References4Affected Software1
GithubExploit
GithubExploit
•added 2020/12/11 3:40 a.m.•144 views

Exploit for Prototype Pollution in Apache Struts

What's this This is a Simple test Project for S2-059 which ca...

9.8CVSS9.4AI score0.97399EPSS
SaveExploits15
GithubExploit
GithubExploit
•added 2020/10/22 5:55 p.m.•109 views

Exploit for Prototype Pollution in Apache Struts

It is an offensive tool for Apache Struts 2 exploitation. The re...

9.8CVSS10AI score0.97399EPSS
SaveExploits15
GithubExploit
GithubExploit
•added 2020/08/13 1:05 p.m.•110 views

Exploit for Prototype Pollution in Apache Struts

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0...

9.8CVSS9.7AI score0.97399EPSS
SaveExploits15
Rows per page
Query Builder