@buckeye/bs-layered-config (>=1.0.0, <=1.2.0), reason-nconf (>=1.2.0, <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (0.0.2)

nconf-toml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: OSV:GHSA-HX7J-43W2-7RJ7...

Prototype pollution in nconf-toml

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

GHSA-HX7J-43W2-7RJ7 Prototype pollution in nconf-toml

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

nconf-toml is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

CVE-2021-25946 affects the npm package nconf-toml . Vulnerable versions are 0.0.1 through 0.0.2 and the root cause is a prototype pollution flaw in the module, which can allow an attacker to modify object prototypes. The practical impact, as documented, includes a potential denial of service and ...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

PT-2021-16872 · Unknown · Nconf-Toml

Name of the Vulnerable Software and Affected Versions: nconf-toml versions 0.0.1 through 0.0.2 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations: For versions 0.0.1 through 0.0.2...

nconf-toml 安全漏洞

nconf is a plugin in TOML format. A security vulnerability exists in nconf-toml versions 0.0.1 through 0.0.2, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

Nconf 1.3 - Multiple SQL Injection

No description provided by source. Exploit Title: nconf handleitem.php?Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat [email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage:...

NConf 1.3 (detail.php detail_admin_items.php, id parameter) SQL Injection

No description provided by source. Exploit Title: nconf detail.php?detailadminitems.php blind injection Date: 2013/1/20 Exploit Author: [email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Version: nconf 1.3 Tested on: Server: Apache/2.2.15 Centos PHP/5.3.3 ...

NConf 1.3 Arbitrary File Creation

No description provided by source. Exploit Title: nconf file read and wrtite exploit Date: 2013/1/20 Exploit Author: [email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Version: nconf 1.3 Tested on: Server: Apache/2.2.15 Centos PHP/5.3.3 nconf can modify th...

NConf delete_attr.php id Parameter SQL Injection

The version of the NConf installed on the remote host is affected by a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'deleteattr.php' script. An attacker may be able to leverage this to manipulate data in the back-end database o...

Nconf 1.3 SQL Injection / Cross Site Scripting Vulnerabilities

Nconf version 1.3 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，email protected Software Link: http://sourceforge.net/projects/nconf/files/nconf/...

Nconf 1.3 - Multiple SQL Injections

Nconf 1.3 - Multiple SQL Injections Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage:...

Nconf 1.3 - Multiple SQL Injections

Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage: http://security-geeks.blogspot.com/...

Nconf 1.3 SQL Injection / Cross Site Scripting

Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage: http://security-geeks.blogspot.com/...

NConf 1.3 - Arbitrary File Creation

NConf 1.3 - Arbitrary File Creation Exploit Title: nconf file read and wrtite exploit Date: 2013/1/20 Exploit Author: haidao，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Version: nconf 1.3 Tested on: Server: Apache/2.2.15 Centos PHP/5.3.3 nconf can modify t...