807 matches found
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the $ shell API due to improper neutralization of user input. An attacker can exploit this by...
CVE-2024-21548
Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...
@01ht/ht-api-helper-functions (>=1.0.0 <=1.0.2), @1amageek/tradable (>=0.1.0 <=0.9.0) +524 more potentially affected by CVE-2024-21548 via bun (>=0.0.10 <=1.1.3)
bun NPM version =0.0.10, =1.0.0, =0.1.0, =0.0.1, =0.1.17, =1.0.0, =0.0.3, =1.1.21, =0.0.2, =0.1.0, =0.0.1, =1.6.0, =1.0.0, =1.0.2 and more Source cves: CVE-2024-21548 Source advisory: OSV:GHSA-V9MX-4PQQ-H232...
GHSA-V9MX-4PQQ-H232 Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo
Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...
Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo
Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...
CVE-2024-21548
Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...
CVE-2024-21548
Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...
CVE-2024-21548
Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...
CVE-2024-21548
CVE-2024-21548 affects the Bun runtime. Versions before 1.1.30 (and after 0.0.12, per sources) are vulnerable to a Prototype Pollution flaw caused by improper input sanitization in Bun’s APIs that accept objects. The issue can enable modifying object prototypes, with the downstream risk as descri...
Bun 安全漏洞
Bun is a Bun open source all-in-one toolkit for JavaScript and TypeScript applications. A security vulnerability exists in versions of Bun prior to 1.1.30, which stems from improper input cleanup and susceptibility to prototype contamination...
PT-2024-18959 · Bun · Bun
Name of the Vulnerable Software and Affected Versions: bun versions prior to 1.1.30 Description: The issue is related to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Recommendations: For versions prior t...
@agent_z/egg (>=1.0.0 <=1.0.2), @ccci/micro-server (>=1.0.57 <=1.0.132) +16 more potentially affected by CVE-2024-21548 via bun (>=0.0.2 <=1.1.3)
bun NPM version =0.0.2, =1.0.0, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.3, =0.0.2, =0.0.3, =0.2.0, =0.0.55, =0.1.0, =0.1.1 and more Source cves: CVE-2024-21548 Source advisory: SNYK:JS-BUN-8499549...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun' JavaScript runtime. The...
Malicious code in openai-bun-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9174 Malicious code in openai-bun-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview openai-bun-test is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview openai-bun-test is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Exploit for Injection in Atlassian Confluence_Data_Center
CVE-2023-22527-confluence Confluence CVE-2023-22527 realworl...
Bun Wars - Free Strategy Game - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Bun Wars - Free Strategy Game published at the 'play' market has multiple vulnerabilities...
eXV2 Module bamaGalerie 3.03 - Remote SQL Injection Vulnerability
No description provided by source. eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :modules/bamagalerie3...