PT-2019-19993

Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 3.13.0 Description The issue allows for a Denial of Service by parsing a carefully-crafted YAML file, causing the node process to stall and potentially exhaust system resources. Recommendations Upgrade to version 3.13...

GHSA-8J8C-7JFH-H6HX Code Injection in js-yaml

Versions of js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load function may execute arbitrary code injected through a malicious YAML file. Objects that have toString as key, JavaScript code as value and are used as explicit mapping keys allow attackers to execute the supplied code...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +16184 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.13.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J8C-7JFH-H6HX...

Code Injection in js-yaml

Versions of js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load function may execute arbitrary code injected through a malicious YAML file. Objects that have toString as key, JavaScript code as value and are used as explicit mapping keys allow attackers to execute the supplied code...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +16184 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.13.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: GHSA-8J8C-7JFH-H6HX...

PT-2019-20028

Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 3.13.1 Description The issue allows for code injection through malicious YAML files. The load function may execute arbitrary code when it encounters objects with toString as a key and JavaScript code as a value, used ...

Kaspersky antivirus JS-formatted file handler Code Execution

The vulnerability of JS-formatted file handler components in Kaspersky antivirus tools is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code with system privileges...

CVE-2019-2045

In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...

CVE-2019-11814

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

CVE-2019-11814: Improper Neutralization of Input During Web Page Generation

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

chakra: Stack-use-after-return in Js::NarrowStringToWide

Detailed report: https://oss-fuzz.com/testcase?key=5668803167387648 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-return READ Crash Address: 0x7f9fb8b97920 Crash State: Js::NarrowStringToWide Js::WabtInterface::EntryConvertWast2Wasm...

osTicket 1.11 - Cross-Site Scripting / Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications Exploit Title: osTicket v1.11 - Cross-Site Scripting to Local File Inclusion Exploit Author: Özkan Mustafa Akkuş AkkuS @ehakkus Contact: https://pentest.com.tr Vendor Homepage: https://osticket.com Software Link:...

CVE-2017-11429

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

CVE-2017-11429

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

CVE-2017-11429 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

CVE-2017-11429

CVE-2017-11429 affects Clever saml2-js (versions 2.0 and earlier). The issue arises from incorrect handling of XML DOM traversal and canonicalization APIs, allowing a remote attacker to modify SAML content without invalidating the cryptographic signature, potentially bypassing authentication to S...

wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)

saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: MEND:CVE-2017-11429...

CVE-2017-11429: Improper Authentication

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

PT-2019-7880

Name of the Vulnerable Software and Affected Versions saml2-js versions prior to 1.12.4 saml2-js versions prior to 2.0.2 Description The issue arises from the incorrect utilization of XML DOM traversal and canonicalization APIs, allowing an attacker to manipulate SAML data without invalidating it...

Arbitrary Code Execution

js-yaml is vulnerable to arbitrary code execution. The vulnerability exists through the usage of unsafe load function, which allows attackers to inject arbitrary code via a malicious YAML file using objects that have toString as key, JavaScript code as value and are used as explicit mapping keys...