Prototype Pollution in flat-wrap

All versions of flat-wrap are vulnerable to prototype pollution. The function unflatten does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941: Incorrect Authorization

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

PT-2020-21027

Name of the Vulnerable Software and Affected Versions klona versions prior to 1.1.1 Description The issue allows an attacker to add or modify an existing property that will exist on all objects due to the lack of restriction on the modification of an Object's prototype when cloning objects...

PT-2020-21299

Name of the Vulnerable Software and Affected Versions flat-wrap versions affected versions not specified Description The issue concerns prototype pollution. The unflatten function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing...

PT-2020-15864 · Taylor Otwell · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.18.35 Laravel versions 7.x prior to 7.24.0 Description: An issue was discovered in Laravel where the $guarded property is mishandled in certain situations involving requests with JSON column nesting expressions...

GHSA-9PCF-H8Q9-63F6 Sandbox Breakout / Arbitrary Code Execution in safe-eval

All versions of safe-eval are vulnerable to Sandbox Escape leading to Remote Code Execution. A payload chaining a function's callee and caller constructors can escape the sandbox and execute arbitrary code. For example, the payload = const targetKey = Object.keysthis0; Object.definePropertythis,...

PT-2020-21056

Name of the Vulnerable Software and Affected Versions lodash.mergewith versions prior to 4.6.1 Description The issue allows a malicious user to modify the prototype of Object via proto , causing the addition or modification of an existing property that will exist on all objects. This is due to th...

arizonapropertysales.com Cross Site Scripting vulnerability OBB-1291458

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-25061

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

CVE-2020-25061

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

CVE-2020-25061

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

CVE-2020-25061: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

PT-2020-15921

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9 and 10 software Description An issue was discovered that allows property overwrites due to the lge property component. Recommendations For Android OS 9 and 10 software, consider restricting access to the lge...

gracehealeyproperty.com.au Cross Site Scripting vulnerability OBB-1277588

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Prototype Pollution

supermixer is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

Prototype Pollution

property-expr is vulnerable to prototype pollution. An attacker is able to add and modify properties of Object.prototype using a proto payload...