Prototype Pollution

tree-kit is vulnerable to prototype pollution. The vulnerability exists in the op function of browser/tree-kit.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes...

PT-2018-10541

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash, via a crafted ELF file. This is due to a problem in the sh op function...

PT-2017-13023

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.10 Linux kernel versions prior to 4.9 for KASLR protection mechanism bypass Description The issue is related to the acpi ps complete final op function in the Linux kernel, which does not properly flush node...