444 matches found
PT-2020-21463
Name of the Vulnerable Software and Affected Versions luna-mock versions affected versions not specified Description The issue concerns malicious code in the software that uploads system information to a remote server, downloads a file, and executes it. Any computer with this package installed or...
PT-2020-20958
Name of the Vulnerable Software and Affected Versions river-mock versions affected versions not specified Description The issue concerns malicious code in the river-mock package, which uploads system information to a remote server, downloads a file, and executes it. Any computer with this package...
Information leakage vulnerability in the standard version of PHPEMS online simulation test system of Xinxiang City Falling Pen Thousand Words Network Technology Co.
PHPEMS online mock exam system is developed based on PHP+Mysql and supports multiple question types and presentation methods. The standard version of PHPEMS Online Mock Exam System of Xinxiang Falling Words Network Technology Co., Ltd. has an information leakage vulnerability, which can be...
CVE-2020-0133
In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2020-0133
CVE-2020-0133 affects Android 10. The issue arises in MockLocationAppPreferenceController.java where a permissions bypass allows spoofing GPS location, enabling local privilege escalation. Exploitation details are not publicly provided in the connected documents; the NVD entry lists local attack ...
skia:api_mock_gpu_canvas: Use-of-uninitialized-value in GrShape::simplifyRect
Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5162098826149888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...
python27:2.7 security, bug fix, and enhancement update
An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet,...
Prototype Pollution
express-mock-middleware is vulnerable to Prototype Pollution. It allows an attacker to inject properties of the Object.prototype, manipulating the attributes by overwriting, or polluting them...
express-mock-middleware input validation error vulnerability
express-mock-middleware is a mock middleware. An input validation error vulnerability exists in express-mock-middleware version 0.0.6 and earlier. The vulnerability stems from a network system or product that does not properly validate input data. No detailed vulnerability details are provided at...
CVE-2020-7616
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...
CVE-2020-7616
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...
CVE-2020-7616
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...
CVE-2020-7616
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the "Object.prototype". Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed...
CVE-2020-7616
The CVE-2020-7616 entry concerns express-mock-middleware up to version 0.0.6. Affected component: exported functions of the package that can be manipulated to pollute Object.prototype (prototype pollution). Root cause: exploitation requires placing attack code in a newly created directory so that...
CVE-2020-7616: Improperly Controlled Modification of Object Prototype Attributes
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...
PT-2020-19656 · Npm · Express-Mock-Middleware
Name of the Vulnerable Software and Affected Versions: express-mock-middleware versions 0.0.0 through 0.0.6 Description: The issue allows exported functions by the package to be tricked into adding or modifying properties of the Object.prototype, which can be exploited by creating a new directory...
Prototype Pollution
Overview express-mock-middleware is an A simple mock middleware for express. Affected versions of this package are vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability...
PHPEMS suffers from an information leakage vulnerability
PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, support for a variety of types of questions and presentation, is the first to support the question of the question and hand automatic one of the scoring of the PHP online mock exam system. PHPEMS has...
python27:2.7 security update
Cython 0.28.1-7 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 PyYAML 3.12-16 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 babel 2.5.1-9 - Bumping due to problems with modular RPM upgrade path 1695587 - Related:...