CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 An Android version of pikpak version V1.29.2 element debugging interface leakage vulnerability fix at pikpak 1.30.1 Suggested description The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Informati...

EUVD-2023-1281

Malicious code in bioql PyPI...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

vConsole Prototype Contamination

The vulnerability of the setOption function in the vConsole software package is related to unregulated changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack remotely...

Prototype Pollution

vconsole is vulnerable to Prototype Pollution. An attacker can inject properties into existing prototypes via the setOption function of core.ts and modify the proto attribute in the keyOrObj parameter...

Prototype Pollution in vConsole

vConsole was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

GHSA-F737-3FH6-JF6W Prototype Pollution in vConsole

vConsole was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: GHSA-F737-3FH6-JF6W...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

Design/Logic Flaw

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363: Improperly Controlled Modification of Object Prototype Attributes

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

Tencent vConsole security vulnerabilities

Tencent vConsole is a lightweight, extensible front-end development tool for mobile web from Tencent, China. A security vulnerability exists in Tencent vConsole version 3.15.0, which stems from a prototype contamination issue due to incorrect key and value parsing in setOptions...

@21cnfe/onekit-mp-cli (2.0.1), @55hudong/base-module (>=0.0.1, <=0.0.2) +47 more potentially affected by CVE-2023-30363 via vconsole (>=2.5.2, <=3.15.0)

vconsole NPM version =2.5.2, =0.0.1, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.4.13 and more Source cves: CVE-2023-30363 Source advisory: MEND:CVE-2023-30363...

CVE-2023-30363

vConsole v3.15.0 has a prototype pollution flaw caused by incorrect key/value resolution in setOptions within core.ts. The issue is described as high-severity (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no exploitation details are provided in the included documents, and a concrete reme...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

PT-2023-22654 · Vconsole · Vconsole

Name of the Vulnerable Software and Affected Versions: vConsole version 3.15.0 Description: The issue is related to a prototype pollution in vConsole due to incorrect key and value resolution in the setOptions function in core.ts. This can potentially lead to security issues. Recommendations: For...