Lucene search
+L

807 matches found

Snyk
Snyk
added 2025/03/23 8:45 a.m.9 views

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the $ shell API due to improper neutralization of user input. An attacker can exploit this by...

8.8CVSS7.5AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 10:48 a.m.9 views

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

7.7CVSS6.1AI score0.00647EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2024/12/18 6:30 a.m.10 views

@01ht/ht-api-helper-functions (>=1.0.0 <=1.0.2), @1amageek/tradable (>=0.1.0 <=0.9.0) +524 more potentially affected by CVE-2024-21548 via bun (>=0.0.10 <=1.1.3)

bun NPM version =0.0.10, =1.0.0, =0.1.0, =0.0.1, =0.1.17, =1.0.0, =0.0.3, =1.1.21, =0.0.2, =0.1.0, =0.0.1, =1.6.0, =1.0.0, =1.0.2 and more Source cves: CVE-2024-21548 Source advisory: OSV:GHSA-V9MX-4PQQ-H232...

7.7CVSS5.7AI score0.00647EPSS
SaveExploits0
OSV
OSV
added 2024/12/18 6:30 a.m.3 views

GHSA-V9MX-4PQQ-H232 Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...

7.7CVSS5.9AI score0.00647EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/12/18 6:30 a.m.13 views

Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...

7.7CVSS6.7AI score0.00647EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/18 6:6 a.m.9 views

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

7.7CVSS6AI score0.00647EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/18 6:6 a.m.24 views

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

7.7CVSS0.00647EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/18 6:6 a.m.6 views

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

7.7CVSS6AI score0.00647EPSS
SaveExploits0References5
CVE
CVE
added 2024/12/18 6:6 a.m.86 views

CVE-2024-21548

CVE-2024-21548 affects the Bun runtime. Versions before 1.1.30 (and after 0.0.12, per sources) are vulnerable to a Prototype Pollution flaw caused by improper input sanitization in Bun’s APIs that accept objects. The issue can enable modifying object prototypes, with the downstream risk as descri...

7.7CVSS6AI score0.00647EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.4 views

Bun 安全漏洞

Bun is a Bun open source all-in-one toolkit for JavaScript and TypeScript applications. A security vulnerability exists in versions of Bun prior to 1.1.30, which stems from improper input cleanup and susceptibility to prototype contamination...

7.7CVSS6.4AI score0.00647EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.21 views

PT-2024-18959 · Bun · Bun

Name of the Vulnerable Software and Affected Versions: bun versions prior to 1.1.30 Description: The issue is related to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Recommendations: For versions prior t...

7.7CVSS7.2AI score0.00647EPSS
SaveExploits0References12
vulnersOsv
vulnersOsv
added 2024/12/12 2:46 p.m.5 views

@agent_z/egg (>=1.0.0 <=1.0.2), @ccci/micro-server (>=1.0.57 <=1.0.132) +16 more potentially affected by CVE-2024-21548 via bun (>=0.0.2 <=1.1.3)

bun NPM version =0.0.2, =1.0.0, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.3, =0.0.2, =0.0.3, =0.2.0, =0.0.55, =0.1.0, =0.1.1 and more Source cves: CVE-2024-21548 Source advisory: SNYK:JS-BUN-8499549...

7.7CVSS5.8AI score0.00647EPSS
SaveExploits0
Snyk
Snyk
added 2024/12/12 2:46 p.m.7 views

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun' JavaScript runtime. The...

7.7CVSS6.5AI score0.00647EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 5:6 a.m.5 views

Malicious code in openai-bun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/10/09 5:6 a.m.6 views

MAL-2024-9174 Malicious code in openai-bun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2024/10/02 12:28 p.m.4 views

Malicious Package

Overview openai-bun-test is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS7AI score
SaveExploits0References2
Snyk
Snyk
added 2024/10/02 12:28 p.m.3 views

Malicious Package

Overview openai-bun-test is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS7AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/01/23 7:10 a.m.355 views

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworl...

10CVSS9.9AI score0.99984EPSS
SaveExploits32
hackapp
hackapp
added 2016/04/01 10:10 a.m.9 views

Bun Wars - Free Strategy Game - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bun Wars - Free Strategy Game published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

eXV2 Module bamaGalerie 3.03 - Remote SQL Injection Vulnerability

No description provided by source. eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :modules/bamagalerie3...

7.1AI score
SaveExploits0
Rows per page
Query Builder