thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

2022-10 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5018410)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2022-10 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5018410)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2022-37617

Prototype pollution in thlorenz browserify-shim 3.8.15, due to the k variable handling in resolve-shims.js (resolveShims function). Connected sources list this as a vulnerability in the browserify-shim package, with the issue affecting resolution logic in resolve-shims.js and enabling potential p...

PT-2022-24029 · Thlorenz · Browserify-Shim

Name of the Vulnerable Software and Affected Versions: thlorenz browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function within the resolve-shims.js file of thlorenz browserify-shim. This vulnerability is exploited via th...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

Malicious code in node_resolve_index_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8be7ea03bc81bcad9f6fe805739562d98d955154ff91cd7d75255868f01ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node_resolve_index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a1ceae10597b78717c9ec88f3ff2896ec117126cbd5a43968948da49b8870ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Aced - Tool to parse and resolve a single targeted Active Directory principal's DACL

Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator. Additionally, the logging...

ManageEngine OpManager getDNSResolveOption Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine OpManager. Authentication is required to exploit this vulnerability. The specific flaw exists within the getDNSResolveOption function. The issue results from the lack of proper validatio...

Cross-site Scripting (XSS)

jsoup is vulnerable to cross-site scripting. The vulnerability exists in resolve function in StringUtil.java because the jsoup cleaner is not properly sanitized when SafeList.preserveRelativeLinks is enabled which allows an attacker to inject and execute arbitrary javascript...

go-toolset:ol8 security and bug fix update

delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.12-1 - Update Go to version 1.17.12 - Resolves: rhbz2109182 1.17.10-2 - Clean up dist-git patches - Resolves: rhbz2109173 go-toolset 1.17.12-1 - Update Go to...

Malicious code in lolo0093 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b217ff3070d15495ece17597428c8f6c0fe37aa9a41c452888bbed1b219fe28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2022-06 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5016139)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Malicious code in dazaar-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec481e9d8850ed6a32f1615cfedcbe3607058c591c669780f6ba7bbbf4c2183e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2359 Malicious code in dazaar-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec481e9d8850ed6a32f1615cfedcbe3607058c591c669780f6ba7bbbf4c2183e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in resolve-linked (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5766 Malicious code in resolve-linked (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...