Prototype Pollution

bodymen is vulnerable to prototype pollution. The vulnerability exists as the handler function accepts a proto payload, allowing the adding or modifying properties of Object.prototype...

Design/Logic Flaw

bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

CVE-2019-10792: Improper Neutralization of Special Elements in Output Used by a Downstream Component

bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

Reflecting XSS Vulnerability in CMS Contenido 4.9.x-4.9.5

Advisory: Reflecting XSS Vulnerability in CMS Contenido 4.9.x-4.9.5 Advisory ID: SROEADV-2014-03 Author: Steffen Rцsemann Affected Software: CMS Contenido 4.9.x-4.9.5 Release: 10th Dec 2014 Vendor URL: http://www.contenido.org/de/ Vendor Status: fixed CVE-ID: - ==========================...

CrystalFTP Pro 2.8 - Remote Buffer Overflow Exploit

No description provided by source. / CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a pop edx pop eax ret in kernel32.dll. this...

Mandriva Update for xorg-x11 MDKSA-2007:079 (xorg-x11)

Check for the Version of xorg-x11 OpenVAS Vulnerability Test Mandriva Update for xorg-x11 MDKSA-2007:079 xorg-x11 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the handling of RPC requests to the Tape Engine service which...