30 matches found
DrayTek Router RCE (CVE-2020-8515)
Exploits CVE-2020-8515 in DrayTek Vigor routers: unauthenticated command injection via keyPath in /cgi-bin/mainfunction.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek mainfunction.cgi command injection CVE-2020-8515.""" import re from kittysploit import from lib.protocols.http.httpclie...
CVE-2026-78181
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181
CVE-2026-78181 is a prototype pollution vulnerability in ractivejs ractive versions up to 1.4.4 . The flaw resides in the Ractive#set function within the Keypath Handler component, where improper control of object prototype attribute modification allows a remote, unauthenticated attacker to injec...
EUVD-2026-64704
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
PT-2026-79816
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
CVE-2026-78181: Improperly Controlled Modification of Object Prototype Attributes
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...
EUVD-2023-2296
Malicious code in bioql PyPI...
CVE-2023-26139
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like “proto”...
Prototype Pollution
underscore-keypath is vulnerable to Prototype Pollution. The vulnerability exists via the name argument in the setProperty function at underscore-keypath.js which allows an attacker to inject and modify properties such as proto in the obj parameter resulting in prototype pollution...
@ckies/cli (>=0.0.2, <=0.0.4), @crawless/utils (>=1.0.0, <=1.0.24) +82 more potentially affected by CVE-2023-26139 via underscore-keypath (>=0.0.15, <=0.9.3)
underscore-keypath NPM version =0.0.15, =0.0.2, =1.0.0, =0.1.1, =0.0.1, =1.0.1, =1.2.0, =1.0.2, =1.0.0, =1.457.521, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2023-26139 Source advisory: GHSA-GPVC-MX6G-CCHV...
underscore-keypath vulnerable to Prototype Pollution
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like proto...
GHSA-GPVC-MX6G-CCHV underscore-keypath vulnerable to Prototype Pollution
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like proto...
@ckies/cli (>=0.0.2, <=0.0.4), @crawless/utils (>=1.0.0, <=1.0.24) +82 more potentially affected by CVE-2023-26139 via underscore-keypath (>=0.0.15, <=0.9.3)
underscore-keypath NPM version =0.0.15, =0.0.2, =1.0.0, =0.1.1, =0.0.1, =1.0.1, =1.2.0, =1.0.2, =1.0.0, =1.457.521, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2023-26139 Source advisory: OSV:GHSA-GPVC-MX6G-CCHV...
CVE-2023-26139
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like “proto”...
CVE-2023-26139
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like “proto”...
CVE-2023-26139
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like “proto”...