32 matches found
Prototype Pollution
comb is vulnerable to prototype pollution. The function deepMerge allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype...
CVE-2021-23561
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23561
CVE-2021-23561 affects the npm package comb, where the deepMerge() function enables Prototype Pollution. The vulnerability arises from unsafe recursive merge and path-based property assignment, allowing an attacker to modify Object.prototype properties (e.g., proto , constructor, prototype). Docu...
CVE-2021-23561 Prototype Pollution
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
comb 代码问题漏洞
comb is a node framework that provides a one-stop shop for frequently needed utilities. A code issue exists in Comb where the product is susceptible to prototype contamination from the mergeDeep function. The following products and versions are affected:...
CVE-2021-23561: Improperly Controlled Modification of Object Prototype Attributes
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
@questwork/authenticator (>=0.1.0, <=0.1.5), @questwork/qw-service-tools (>=0.0.8, <=0.1.4) +22 more potentially affected by CVE-2021-23561 via comb (>=0.0.6, <=2.0.0)
comb NPM version =0.0.6, =0.1.0, =0.0.8, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2021-23561 Source advisory: SNYK:JS-COMB-1730083...
Prototype Pollution
Overview comb is a framework for node Affected versions of this package are vulnerable to Prototype Pollution via the deepMerge function. PoC: // PoC.js var deepMerge = require"comb/lib/base/object.js".deepMerge var obj = var maliciouspayload = '"proto":"polluted":"Yes! Its Polluted"';...
Titan FTP Server 'XCRC' and 'COMB' Directory Traversal Vulnerabilities
This host is running Titan FTP Server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtitanftpserverdirtravvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Titan FTP Server 'XCRC' and 'COMB' Directory Traversal Vulnerabilities Authors: Madhuri D Copyright:...
Directory traversal
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command...
CVE-2010-2425
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command...
