Remote Code Execution (RCE)

jsen is vulnerable to remote code execution RCE. Lack of sanitization of the required field of the schema allows an attacker to inject and execute malicious javascript code via Function.apply;...

CVE-2020-7777

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In...

CVE-2020-7777

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In...

CVE-2020-7777 Arbitrary Code Execution

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In...

PT-2020-19786

Name of the Vulnerable Software and Affected Versions jsen versions all Description This issue affects the jsen package, allowing an attacker to run arbitrary JavaScript code on the victim machine if they can control the schema file. The required field of the schema is not properly sanitized, and...

CVE-2020-7777: Undefined Security Weakness

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In...

Microsoft Edge - 'Function.apply' Information Leak (MS16-119)

var t = new Array1,2,3; function f var h = ; var a = ...arguments foritem in a var n = new Numberaitem; if n 0 n = n + 0x100000000; h.pushn.toString16; alerth; var q = f; t.length = 20; var o = ; Object.definePropertyo, '3', get: function...

Flash Player - Integer Overflow in Function.apply

Flash Player - Integer Overflow in Function.apply Source: https://code.google.com/p/google-security-research/issues/detail?id=302&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=470837 VULNERABILITY DETAILS A...

Flash Player - Integer Overflow in Function.apply

Source: https://code.google.com/p/google-security-research/issues/detail?id=302&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=470837 VULNERABILITY DETAILS An integer overflow while calling Function.apply ca...

Flash Player Integer Overflow in Function.apply Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=302&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=470837 VULNERABILITY DETAILS ...