CVE-2024-39143

CVE-2024-39143 describes a stored cross-site scripting (XSS) vulnerability in ResidenceCMS 2.10.1. A low-privilege user can save malicious HTML in a property content field, which is then stored and rendered on secondary views, potentially triggering payloads (including when visited by an administ...

PT-2024-28361 · Unknown · Residencecms

Name of the Vulnerable Software and Affected Versions: ResidenceCMS version 2.10.1 Description: A stored cross-site scripting XSS issue exists, allowing a low-privilege user to create malicious property content with HTML inside, which acts as a stored XSS payload. Recommendations: For ResidenceCM...

Prototype Pollution

collection.js is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the extend function of extend.js which allows an attacker to inject malicious property's such as proto, resulting in prototype pollution...

Prototype Pollution

uglify-js is vulnerable to prototype pollution. The vulnerability exists in DEFNODE function of ast.js via the name variable which allows an attacker to inject malicious property resulting in prototype pollution...

Prototype Pollution

mongoose is vulnerable to pollution prototype. The vulnerability exists in add and path functions in lib/schema.js because it allows setting proto when creating schema with dotted properties which allows a remote attacker to inject and execute malicious property resulting in prototype pollution...

Prototype Pollution

deep.assign is vulnerable to prototype pollution. The vulnerability exists in deepAssign function due to improper parameters validation which allows an attacker to inject malicious property resulting in prototype pollution...

Prototype Pollution

async is vulnerable to prototype pollution. An attacker is able to inject malicious property types via mapValues method and gain unintended privileges due to prototype pollution vulnerability...

VisiWave VWR File Parsing (CVE-2011-2386)

A remote code execution vulnerability exists in VisiWave's Site Survey Report. The vulnerability is caused by a failure to validate a user controlled property. A remote attacker can exploit this vulnerability by using a malicious property, potentially causing arbitrary code to be injected and...