DEBIAN-CVE-2018-16491

A prototype pollution vulnerability was found in node.extend 1.1.7, 2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16491

CVE-2018-16491 describes a prototype pollution vulnerability in node.extend before 1.1.7 and before 2.0.1, enabling an attacker to inject arbitrary properties onto Object.prototype. Affected versions are node.extend <1.1.7, ~

Drupal Drupalgeddon 2 Forms API Property Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal Drupalgeddon 2 Forms API Property Injection', 'Description' = %q This module exploits a Drupal property injection in the Forms API. Drupal...

Drupal Drupalgeddon 2 Forms API Property Injection Exploit

This Metasploit module exploits a Drupal property injection in the Forms API. Drupal versions 6.x, less than 7.58, 8.2.x, less than 8.3.9, less than 8.4.6, and less than 8.5.1 are vulnerable. This module requires Metasploit: https://metasploit.com/download Current source:...

Drupal Drupalgeddon 2 Forms API Property Injection

This module exploits a Drupal property injection in the Forms API. Drupal 6.x, use exploit/unix/webapp/drupal/drupalgeddon2 msf undefineddrupalgeddon2 show actions ...actions... msf undefineddrupalgeddon2 set ACTION msf undefineddrupalgeddon2 show options ...show and set options... msf...

Mozilla Thunderbird 16.x < 16.0.2 Multiple Vulnerabilities

Binary data 6614.prm...

Code injection

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

Firefox 10.x < 10.0.10 Multiple Vulnerabilities

The installed version of Firefox 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

Thunderbird < 16.0.2 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is earlier than 16.0.2 and is therefore potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform...

Thunderbird 10.x < 10.0.10 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

SeaMonkey < 2.13.2 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.13.2. As such, it is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform...

Firefox < 16.0.2 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 16.0.2 and is therefore potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform...

Firefox < 10.0.10 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 10.0.10 and thus, is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-sit...

Mozilla Thunderbird 10.x < 10.0.10 Multiple Vulnerabilities

The installed version of Thunderbird 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

CVE-2012-4196

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...