57 matches found
PT-2023-18685
Name of the Vulnerable Software and Affected Versions WP Directory Kit plugin for WordPress versions up to, and including, 1.1.9 Description The issue is due to missing or incorrect nonce validation on the insert function, making it possible for unauthenticated attackers to update the plugin's...
WordPress Plugin WP Directory Kit 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
CVE-2023-2277: Cross-Site Request Forgery (CSRF)
The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...
CVE-2022-47028
An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to function insert...
PT-2023-15137 · Unknown · Action Launcher
Name of the Vulnerable Software and Affected Versions: Action Launcher for Android version 50.5 Description: An issue in Action Launcher for Android allows an attacker to cause a denial of service via arbitrary data injection to the insert function. Recommendations: For Action Launcher for Androi...
SUSE CVE-2014-3507
Memory leak in d1both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service memory consumption via zero-length DTLS fragments that trigger improper handling of the return value of a certain...
PT-2023-10224 · Unknown · Tutranta Project Todolist
Name of the Vulnerable Software and Affected Versions: tutranta project todolist affected versions not specified Description: A critical issue was found in the tutrantta project todolist, affecting the getAffectedRows/where/insert/update function in the library/Database.php library. This issue...
PT-2021-10363
Name of the Vulnerable Software and Affected Versions: Textpattern version 4.7.3 Description: The issue concerns an arbitrary file load via the file insert function in include/txp file.php. Recommendations: For Textpattern version 4.7.3, consider disabling the file insert function in include/txp...
GHSA-RJ5F-7C8X-GJG4 Prototype Pollution in promisehelpers
All versions of package promisehelpers up to and including version 0.0.5 are vulnerable to Prototype Pollution via the insert function...
Prototype Pollution
promisehelpers is vulnerable to prototype pollution. The vulnerability exists as the insert function does not restrict proto headers to be set in objects...
CVE-2020-7723
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
Code injection
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
CVE-2020-7723 Prototype Pollution
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
CVE-2020-7723
CVE-2020-7723 affects the JavaScript package promisehelpers. All versions prior to 0.0.6 are vulnerable to prototype pollution via the insert function, enabling an attacker to inject properties into Object.prototype (e.g., through proto ). Documented impacts include potential denial of service an...
CVE-2020-7723
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
CVE-2020-7723
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
CVE-2020-7723: Improperly Controlled Modification of Object Prototype Attributes
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function...
PT-2020-19744 · Unknown · Promisehelpers
Name of the Vulnerable Software and Affected Versions: promisehelpers versions prior to 0.0.6 Description: The issue concerns Prototype Pollution via the insert function. This allows for potential manipulation of object properties. Recommendations: For versions prior to 0.0.6, update to version...
Prototype Pollution
Overview promisehelpers is a Promise helper functions Affected versions of this package are vulnerable to Prototype Pollution via the insert function. POC: const promisehelpers = require'promisehelpers'; var obj = ; promisehelpers.insert'proto', 'polluted', trueobj; console.logpolluted; // true...