Lucene search
K

6 matches found

OSV
OSV
added 2024/05/15 9:53 p.m.11 views

GHSA-CC2W-GHC5-M5QR Laravel Risk of mass-assignment vulnerabilities

Laravel 4.1.29 improves the column quoting for all database drivers. This protects your application from some mass assignment vulnerabilities when not using the fillable property on models. If you are using the fillable property on your models to protect against mass assignment, your application ...

7.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.2 views

PT-2024-40241 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 4.1.29 Description: The issue concerns mass assignment vulnerabilities in Laravel when not using the fillable property on models or when using guarded and passing user-controlled arrays into update or save functions...

7.4AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.1 views

PT-2024-40061 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.18.34 Laravel versions prior to 7.23.2 Description: A security issue was found in Laravel where it was possible to mass assign Eloquent attributes that included the model's table name. This could lead to unexpected...

7.1AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.2 views

PT-2024-40457 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 4.1.29 Description: The issue concerns mass assignment vulnerabilities in Laravel when not using the fillable property on models or when using guarded and passing user-controlled arrays into update or save functions...

7.3AI score
Exploits0References5
Code423n4
Code423n4
added 2022/06/03 12:0 a.m.12 views

uint120 overflow for partially fillable orders in OrderValidator.sol

Lines of code Vulnerability details Repo commit referenced: 49799ce156d979132c9924a739ae45a38b39ecdd Impact In the lines OrderValidator.solL223-L239 where the orderStatus for an orderHash gets updated: orderStatusorderHash.numerator = uint120 filledNumerator + numerator ;...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2019/07/16 12:25 p.m.1 views

Engage Your Management with the Definitive 'Security for Management' Presentation Template

In every organization, there is a person who's directly accountable for cybersecurity. The name of the role varies per the organization's size and maturity – CISO, CIO, and Director of IT are just a few common examples – but the responsibility is similar in all places. They're the person who...

6.9AI score
Exploits0
Rows per page
Query Builder