CVE-2020-28276

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28276

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

Remote code execution

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28281

CVE-2020-28281 affects the npm package set-object-value (versions 0.0.0–0.0.5). The underlying issue is prototype pollution in set-object-value, enabling an attacker to perform DoS and potentially remote code execution by manipulating object prototypes. Connected advisories confirm this prototype...

CVE-2020-28276

CVE-2020-28276 concerns the npm package deep-set , with vulnerable versions 1.0.0–1.0.1. The root cause is a prototype pollution flaw where the function deepSet() may assign to proto without validating object types, enabling an attacker to manipulate properties and potentially cause Denial of Ser...

CVE-2020-28276

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

React Atomic Organism Security Vulnerability

React Atomic Organism is a codebase from the React Atomic team used to provide atomicity support for React applications. A security vulnerability in React Atomic Organism set-object-value versions 0.0.0 through 0.0.5 allows attackers to exploit the vulnerability for denial of service and...

Amino Communications 多款产品信任管理问题漏洞

The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability in a number of its products, which arises from a root user hard-coded SSH key that can be exploited by an attacker to...

CVE-2020-28276: Undefined Security Weakness

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28281: Undefined Security Weakness

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

Klaemo Deep Set Security Vulnerability

Klaemo Deep Set is a codebase from the individual developers of Klaemo based on the Javascript language that can assign values to objects of dictionary type. A security vulnerability exists in deep-set versions 1.0.0 through 1.0.1, which can be exploited by an attacker to cause a denial of servic...

Design/Logic Flaw

Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel which will require a physical reset to restore administrative control via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/setfactory URI...

Gobby Null Pointer Dereference Vulnerability

Gobby is a free collaborative editor. A null pointer dereference vulnerability exists in Gobby 0.4.11 in the D-Bus handler for certain setlanguage calls. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2020-35450

Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...

UBUNTU-CVE-2020-35450

Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

Gobby 代码问题漏洞

Gobby is a free collaborative editor. A null pointer dereference vulnerability exists in Gobby 0.4.11 in the D-Bus handler for certain setlanguage calls. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-27030

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for...

ALEA-2020:5501 openscap bug fix and enhancement update

The OpenSCAP suite enables integration of the Security Content Automation Protocol SCAP line of standards. The openscap packages provide the OpenSCAP library and the oscap utility that provides various SCAP capabilities. Bug Fixes and Enhancements: Enable YAML probe to work with sets of values...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution. The vulnerability is in the set function. PoC const decal = require'decal'; console.log'Before:', .polluted; decal.set, "proto.polluted", "1337"; console.log'After:', .polluted; Details Prototype Pollution is a...