21 matches found
CVE-2024-39015
cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Prototype Pollution
@cafebazaar/hod is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the request function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39015
cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39015
cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39015: Improper Control of Generation of Code
cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
hod security breach
hod is an open source library from Cafe Bazaar. A security vulnerability exists in hod version v0.4.14, which originates from the inclusion of prototype contamination via the function request, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary...
CVE-2024-39015
cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39015
The cafebazaar hod library, specifically version v0.4.14 , is vulnerable to a prototype pollution flaw located within the request function. This vulnerability exists because the function lacks proper checks, allowing an attacker to inject arbitrary properties into the application's prototype. Suc...
PT-2024-28325 · Unknown · Cafebazaar Hod
Name of the Vulnerable Software and Affected Versions: cafebazaar hod version 0.4.14 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the request function...
Security Bulletin: Vulnerability in IBM Semeru Runtime affects Host On-Demand
Summary There is a vulnerability in IBM Semeru Runtime Quarterly Critical Patch Update - Jan 2024 - Includes OpenJDK Jan 2024 Critical Patch Update. Host On-Demand has addressed the applicable CVE plus CVE-2024-22361. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified...
Security Bulletin: Vulnerabilities in IBM Semeru Runtime affects Host On-Demand
Summary There is a vulnerability in IBM Semeru Runtime used by Host On-Demand. Host On-Demand has provided a fix for the applicable CVE. These issues were disclosed as part of the IBM Semeru Runtime Quarterly CPU - Apr 2023 - Includes OpenJDK April 2023 CPU. Vulnerability Details...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in July 2020. Vulnerability Details CVEID:...
Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732...
Easy RM to MP3 Converter - .m3u Universal Stack Overflow
Easy RM to MP3 Converter - .m3u Universal Stack Overflow !/usr/bin/perl Easy RM to MP3 Converter .m3u file Universall Stack Overflow Exploit it's so diferent to the first exploit .pls by stack xd Alpha zrebti 3liha :d Thnx to Zigma & His0k4 & HOD my $header=...
Easy RM to MP3 Converter - '.m3u' Universal Stack Overflow
!/usr/bin/perl Easy RM to MP3 Converter .m3u file Universall Stack Overflow Exploit it's so diferent to the first exploit .pls by stack xd Alpha zrebti 3liha :d Thnx to Zigma & His0k4 & HOD my $header= "\x23\x45\x58\x54\x4D\x33\x55\x0D\x0A\x23\x45\x58\x54\x49\x4E\x46"...
Easy RM To MP3 Converter Stack Overflow
!/usr/bin/perl Easy RM to MP3 Converter .m3u file Universall Stack Overflow Exploit it's so diferent to the first exploit .pls by stack xd Alpha zrebti 3liha :d Thnx to Zigma & His0k4 & HOD my $header= "\x23\x45\x58\x54\x4D\x33\x55\x0D\x0A\x23\x45\x58\x54\x49\x4E\x46"...
WM Downloader 3.0.0.9 (.m3u) Universal Stack Overflow Exploit
Exploit for unknown platform in category local exploits =========================================================== WM Downloader 3.0.0.9 .m3u Universal Stack Overflow Exploit =========================================================== / WM Downloader Version 3.0.0.9 .m3u Universal Stack Overflow...
CVE-2006-6537: Undefined Security Weakness
IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html...
ibmwebsphere-bypass.txt
SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...
