Lucene search
K

8 matches found

Veracode
Veracode
added 2023/10/20 2:20 a.m.16 views

Prototype Pollution

deobfuscator is vulnerable to Prototype Pollution. This vulnerability allows an attacker to modify the prototype of the Object constructor via the LiteralMap transformer, which could then be used to execute arbitrary code on the victim's system...

8.1CVSS7.7AI score0.00165EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/10/18 6:27 p.m.35 views

Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...

8.1CVSS7.9AI score0.00165EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/10/18 6:27 p.m.20 views

GHSA-JG82-XH3W-RHXX Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...

7.8CVSS7.9AI score0.00165EPSS
Exploits1References5
NVD
NVD
added 2023/10/17 11:15 p.m.7 views

CVE-2023-45811

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.2AI score0.00165EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/10/17 10:37 p.m.9 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.4AI score0.00165EPSS
Exploits1References3
OSV
OSV
added 2023/10/17 10:37 p.m.12 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS7.9AI score0.00165EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/10/17 10:37 p.m.13 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.4AI score0.00165EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.2 views

PT-2023-29701 · Node.Js +1 · Node.Js +1

Name of the Vulnerable Software and Affected Versions: Synchrony deobfuscator versions prior to 2.4.4 Description: A proto pollution vulnerability exists in the LiteralMap transformer, allowing crafted input to modify properties in the Object prototype. Successful exploitation could lead to...

8.1CVSS7.9AI score0.00165EPSS
Exploits1References13
Rows per page
Query Builder