Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20085

CVE-2021-20085 affects backbone-query-parameters 0.4.0 and describes a prototype pollution flaw: improperly controlled modification of Object.prototype that enables a malicious user to inject properties into Object.prototype. The connected documents consistently reference this vulnerability and i...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

CVE-2021-20089 affects purl 2.3.2, where improper modification of Object.prototype attributes enables prototype pollution. Root cause: input handling allows injecting properties into Object.prototype; this can impact confidentiality, integrity, and availability (per CVSS3.1 metrics). The availabl...

Exploit for Prototype Pollution in Apache Struts

What's this This is a Simple test Project for S2-059 which ca...

CVE-2020-7770: Improperly Controlled Modification of Object Prototype Attributes

This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution...

Exploit for Prototype Pollution in Apache Struts

It is an offensive tool for Apache Struts 2 exploitation. The re...

CVE-2020-7709: Improperly Controlled Modification of Object Prototype Attributes

This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...

Exploit for Prototype Pollution in Apache Struts

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0...

CVE-2018-11135: Improperly Controlled Modification of Object Prototype Attributes

The script '/adminui/errordetails.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks...