PT-2025-37549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A malicious USB device can construct a service connection response message targeting ENDPOINT0, which is reserved for HTC CTRL RSVD SVC and should not be modified. This allows the device...

SUSE CVE-2019-20149

ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': 'name':'Symbol'. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result...

CVE-2019-18954

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...