GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

youzer

youzer Active Directory 환경을 위한 가짜 사용자 생성기 소개 Youzer의 목표는 정보가 풍부한 Active Directory 환경을 만드는 것입니다. 이는 python3 라이브러리 'faker'를 사용하여 무작위 계정을 생성합니다. root@kitploit: pip3 install faker 단어 목록을 제공하거나 비밀번호를 생성하도록 할 수 있습니다. 생성 옵션은 hashcat 규칙 마스크와 같은 것을 테스트하는 데 적합합니다. 단어 목록 옵션은 환경에 특정 비밀번호 목록을 시드하거나 사전 공격을 연습할...

soc-faker

soc-faker soc-faker는 보안 운영 센터, 정보 보안 전문가, 제품 팀 등이 사용할 가짜 데이터를 생성하는 데 사용됩니다. 시작하기 soc-faker는 Python 3.6 이상에서 작동합니다. pip를 사용하거나 이 저장소를 직접 클론하여 soc-faker를 설치할 수 있습니다. 이 문서를 작성하는 시점에서 soc-faker는 다음과 같은 주요 카테고리에 대한 가짜 데이터를 생성할 수 있습니다. 각 카테고리에 대한 자세한 내용은 아래 링크에서 확인할 수 있습니다: 에이전트 알림 애플리케이션 클라우드 컴퓨터 컨테이너...

fake-useragent

fake-useragent 最新かつシンプルなユーザーエージェントフェイカー。実際のデータベースを備えています。 特徴 データは Intoli LLC から事前にダウンロードされ、後処理されており、データはパッケージ自体に含まれています データは幅広いブラウザエージェントと様々なブラウザで構成されています ユーザーエージェント文字列を取得します（desktop、tablet、mobile の各タイプの UA） useragent、percent、type、devicebrand、browser、browserversion、os、osversion、platform...

CVE-2026-73231

A flaw was found in Faker, a library for generating fake data. The faker.helpers.fake method allows an attacker to control fake templates, which can then access the Function constructor. This access, specifically through fakeEval.resolveProperty when a function returns another function, enables...

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231 Faker: helpers.fake exploitable into arbritary code execution

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231

The CVE refers to Faker.js (faker.helpers.fake in src/modules/helpers/eval.ts) prior to version 10.5.0. A crafted fake template can access the Function constructor via fakeEval.resolveProperty when a function returns another function, enabling arbitrary JavaScript execution. This is fixed in 10.5...

CVE-2026-73231 Faker: helpers.fake exploitable into arbritary code execution

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

PT-2026-70892

Name of the Vulnerable Software and Affected Versions Faker versions prior to 10.5.0 Description The faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns anoth...

Orval Mock Generation Code Injection via const

I am reporting a code injection vulnerability in Orval’s mock generation pipeline affecting @orval/mock in both the 7.x and 8.x series. This issue is related in impact to the previously reported enum x-enumDescriptions https://github.com/advisories/GHSA-h526-wf6g-67jv, but it affects a different...

GHSA-F456-RF33-4626 Orval Mock Generation Code Injection via const

I am reporting a code injection vulnerability in Orval’s mock generation pipeline affecting @orval/mock in both the 7.x and 8.x series. This issue is related in impact to the previously reported enum x-enumDescriptions https://github.com/advisories/GHSA-h526-wf6g-67jv, but it affects a different...

Malicious code in faker-py123123thon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fab9d41bcbc9a1625b625705433588c2bc1d08ca71e57783cc29b74bc76ddeba Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-191625 Malicious code in faker-py123123thon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fab9d41bcbc9a1625b625705433588c2bc1d08ca71e57783cc29b74bc76ddeba Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-37449

Malicious code in faker-python PyPI...

Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-49310 Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...