Prototype Pollution

Prototype pollution vulnerability in ‘expand-hash’ versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

GHSA-X3WR-V4WX-5QPC Prototype Pollution

Prototype pollution vulnerability in ‘expand-hash’ versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

The vulnerability CVE-2021-25948 affects the expand-hash package (versions 0.1.0–1.0.1). The root cause is a prototype pollution issue in expand-hash that allows an attacker to cause a denial of service and may lead to remote code execution. Impact reported includes network-accessible exploitatio...

PT-2021-16874

Name of the Vulnerable Software and Affected Versions expand-hash versions 0.1.0 through 1.0.1 Description The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations For versions 0.1.0 through 1.0.1,...

expand-hash 安全漏洞

expand-hash is a package. Attribute keys can be expanded recursively into objects using dot notation. A security vulnerability exists in expand-hash versions 0.1.0 through 1.0.1 that results in a denial of service and can lead to remote code execution...

CVE-2021-25948: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

PT-2021-27610

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: fz expand indexed pixmap, fz...

Prototype Pollution in patrickleet/expand-keys

Description expand-keys is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var expandKeys = require"expand-keys" console.log"Before : " + .polluted; expandKeys"proto.polluted": "Yes! Its Polluted" console.log"After : " + .polluted; 2. Execute the...

CVE-2020-15292

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor IntPeGetDirectory, TOCTOU IntPeParseUnwindData or insufficie...

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call aka CID-246c320a8cfe.

...

DEBIAN-CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

CVE-2020-29369

CVE-2020-29369 is a real Linux kernel vulnerability described in the connected docs. It is a race condition in mm/mmap.c (expand_downwards vs. expand_upwards) that can occur during munmap page-table free operations, present in Linux kernels before 5.7.11 (CID-246c320a8cfe). The issue is triggered...

CVE-2020-16158

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...