CVE-2024-13490 LTL Freight Quotes – XPO Edition <= 4.3.7 - Unauthenticated SQL Injection

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

.NET 8.0 Update - February 11, 2025 (KB5052978)

None None...

CVE-2024-57067

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57067

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5767 · Dot-Qs · Dot-Qs

Name of the Vulnerable Software and Affected Versions: dot-qs version 0.2.0 Description: A prototype pollution in the lib.parse function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For dot-qs version 0.2.0, consider disabling the lib.parse...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57067: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57067

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

The dot-properties library (version v1.0.1 ) is vulnerable to a prototype pollution flaw within the lib.parse function. An attacker can exploit this by supplying a crafted payload to trigger a Denial of Service (DoS) . As a mitigation, it is recommended to disable the lib.parse function until a f...

dot-properties 安全漏洞

dot-properties is a library for parsing and stringifying .properties files in JavaScript by the individual developer Eemeli Aro. A security vulnerability exists in dot-properties version v1.0.1, which stems from the lib.parse function containing a prototype contamination vulnerability...

CVE-2024-57084: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5773 · Unknown · Hot Properties

Name of the Vulnerable Software and Affected Versions: dot-properties version 1.0.1 Description: A prototype pollution in the lib.parse function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For dot-properties version 1.0.1, consider disabling...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57067

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57067

A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

dot-querystring 安全漏洞

dot-querystring is a dot notation library for node query strings by the individual developer Naoya Tsutsumi. A security vulnerability exists in dot-querystring version v0.2.0, which stems from the lib.parse function containing a prototype contamination vulnerability...

CVE-2024-53915

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...