Lucene search
+L

10 matches found

Veracode
Veracode
•added 2023/10/20 2:20 a.m.•27 views

Prototype Pollution

deobfuscator is vulnerable to Prototype Pollution. This vulnerability allows an attacker to modify the prototype of the Object constructor via the LiteralMap transformer, which could then be used to execute arbitrary code on the victim's system...

8.1CVSS7.7AI score0.00415EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/10/18 6:27 p.m.•34 views

GHSA-JG82-XH3W-RHXX Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...

7.8CVSS7.9AI score0.00415EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/10/18 6:27 p.m.•101 views

Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...

8.1CVSS7.9AI score0.00415EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2023/10/17 11:15 p.m.•66 views

CVE-2023-45811

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.2AI score0.00415EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/10/17 10:37 p.m.•14 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.4AI score0.00415EPSS
SaveExploits1References3
Mend
Mend
•added 2023/10/17 10:37 p.m.•4 views

CVE-2023-45811

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A "proto" pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A "proto" pollution vulnerability exists in the "LiteralMap" transformer allowing crafted input to...

8.9CVSS0.00415EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/10/17 10:37 p.m.•74 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS8.4AI score0.00415EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/17 10:37 p.m.•45 views

CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS7.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•32 views

PT-2023-29701 · Node.Js +1 · Node.Js +1

Name of the Vulnerable Software and Affected Versions: Synchrony deobfuscator versions prior to 2.4.4 Description: A proto pollution vulnerability exists in the LiteralMap transformer, allowing crafted input to modify properties in the Object prototype. Successful exploitation could lead to...

8.1CVSS7.9AI score0.00415EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•7 views

CVE-2023-45811: Improperly Controlled Modification of Object Prototype Attributes

Synchrony deobfuscator is a javascript cleaner & deobfuscator. A proto pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify...

8.1CVSS7.6AI score0.00415EPSS
SaveExploits1References3
Rows per page
Query Builder