98 matches found
CVE-2024-39853
The adolph_dudu ratio-swiper version 0.0.2 is vulnerable to prototype pollution due to the parse function. Attackers can exploit this by passing crafted arguments with the proto property (or through functions like extendDefaults ) to inject arbitrary properties. This vulnerability allows for arbi...
CVE-2024-39000
The ratio-swiper library (v0.0.2) by adolph_dudu is vulnerable to a prototype pollution flaw within the parse function. This vulnerability allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary workaround, i...
CVE-2024-38997
The adolph_dudu ratio-swiper library, specifically version v0.0.2 , is vulnerable to prototype pollution through the extendDefaults function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary ...
CVE-2024-38997
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39000
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39853
adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Swiper Security Vulnerabilities
Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version 0.0.2, which stems from inclusion of prototype contamination via...
CVE-2024-39000: Improperly Controlled Modification of Object Prototype Attributes
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38997: Improperly Controlled Modification of Object Prototype Attributes
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39000
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Malicious code in @linesearch/swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-58 Malicious code in @linesearch/swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @linesearch/swiper
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in swiper-bundie (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e1b659b47e3a72ea3f7e5f575acb49c0035c7a26095e57423c15e594d0161d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6377 Malicious code in swiper-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in swiper-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Prototype Pollution
Overview Versions of swiper before 6.5.1 are susceptible to prototype pollution. Recommendation Upgrade to version 6.5.1 or later References - CVE - GitHub Advisory...
@alicd/oc-address (>=0.1.0-beta.0, <=0.1.3), @alicd/oc-table (>=0.0.1-beta.0, <=0.0.6) +294 more potentially affected by CVE-2021-23370 via swiper (>=6.0.0, <=6.5.0)
swiper NPM version =6.0.0, =0.1.0-beta.0, =0.0.1-beta.0, =0.0.1, =2.0.0-beta.23, =0.1.0, =2.0.0-beta.0, =1.1.8, =0.1.0, =0.1.4, =0.1.0, =0.1.20, =0.1.24 - @aligov/clark-helper-plugin 0.0.8 - @aligov/clark-helper-rax 0.1.0 - @aligov/mobile-app-search 0.1.1 and more Source cves: CVE-2021-23370 Sour...