GHSA-V84X-QVHG-F36R MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php

MantisBT 2.28.3 and earlier contains a remote code execution vulnerability in the admin "Manage Configuration" feature admconfigset.php. When setting a configuration value with a non-string type integer, float, complex, the value is passed through ConfigParser - Tokenizer, which calls eval with a...

MAL-2022-3652 Malicious code in hoisting-peer-check-child (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5057073664e06dbd390f69070f067d47f080f3971af5fc61ed172c1def532b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hoisting-peer-check-child (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5057073664e06dbd390f69070f067d47f080f3971af5fc61ed172c1def532b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the 'ForInContext' Object

/ This is simillar to issue 1263 . When hoisting a function onto the outer scope, if it overwrites the iteration variable for a for-in loop it should invalidate the corresponding ForInContext object, but it doesn't. As a result, an arbitrary object can be passed as the property variable to the...

WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the ForInContext Object

WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the ForInContext Object / This is simillar to issue 1263 . When hoisting a function onto the outer scope, if it overwrites the iteration variable for a for-in loop it should invalidate the corresponding...