Tenda AC18 SetValue DoS

The vulnerability of the SetValue function /goform/setNotUpgrade in the Tenda AC18 router’s microprogrammed software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Tenda O3 SetValue GetValue DoS

The vulnerability of the SetValue and GetValue functions in the Tenda O3 wireless access point software lies in the fact that the operation goes beyond the buffer in memory when processing the lan parameter getVlanConfig. Exploiting this vulnerability allows a remote attacker to cause a service...

CVE-2024-39003

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Prototype Pollution

Overview madlib-object-utils is an A small set of utility functions for working with objects Affected versions of this package are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an...

Prototype Pollution

Overview madlib-object-utils is an A small set of utility functions for working with objects Affected versions of this package are vulnerable to Prototype Pollution via setValue. POC: const objectUtils = require"madlib-object-utils"; objectUtils.setValue'proto.polluted', , true;...