Facebook Hermes 资源管理错误漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. A security vulnerability exists in...

PT-2023-21541 · Hermes · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 Description: A bytecode optimization bug could be used to cause a use-after-free and obtain arbitrary code execution via a carefully crafted payload. This is only...

PT-2023-22710 · Hermes · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit da8990f737ebb9d9810633502f65ed462b819c09 Description: A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled could have been used by an attacker to achieve remot...

Facebook Hermes 安全漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client apps, but is not applicable to server-side infrastructures such as browsers & Node.js. Facebook Hermes...

Facebook Hermes 资源管理错误漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. Facebook Hermes suffers from a...

Facebook Hermes 安全漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browser & Node.js. Facebook Hermes has a security...

Facebook Hermes 资源管理错误漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. Facebook Hermes has a security...

Facebook Hermes 代码问题漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. Facebook Hermes has a security...

PT-2023-19037 · Facebook · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 Description: An error in BigInt conversion to Number in Hermes could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. This...

Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1204 Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in experimental-entrevista-react-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c994de6d5887278ea6db782133b3a5d4d6be0526117b52ed13889bdf94b4537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-319 Malicious code in experimental-entrevista-react-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c994de6d5887278ea6db782133b3a5d4d6be0526117b52ed13889bdf94b4537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-92 Malicious code in anf-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anf-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-miscosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e19123a91cb7a1bd1e4a47d412e34e2235998c8bab60e33662f0fea42e1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-726 Malicious code in react-microsoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbff8e8d6bc53549d890642e4b9625f2177839bdd586402e12331a2d22f9a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-miscrosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf09eb4d9a3bff918c5d70b7319f6734bad6fbc2d4c6975462602b53ab6f54e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-blue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5108d06d664409328068b5859c46add10bb08c95d223960e1bf8910d507f5466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-727 Malicious code in react-miscosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e19123a91cb7a1bd1e4a47d412e34e2235998c8bab60e33662f0fea42e1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...