CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 pikpak 안드로이드 버전 V1.29.2 요소 디버깅 인터페이스 누수 취약점 pikpak 1.30.1에서 수정됨 제안된 설명 pikpak v1.29.2 안드로이드 버전에서 디버그 인터페이스를 통해 정보 누출이 발생하는 것으로 확인되었습니다. 추가 정보 세부 링크:https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing 취약점 유형 잘못된 접근 제어 제품 공급업체...

EUVD-2023-1281

Malicious code in bioql PyPI...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

The vulnerability of the setOption function in the vConsole software package, which allows a hacker to execute a “prototype contamination” attack.

The vulnerability of the setOption function in the vConsole software package is related to unregulated changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack remotely...

Prototype Pollution

vconsole is vulnerable to Prototype Pollution. An attacker can inject properties into existing prototypes via the setOption function of core.ts and modify the proto attribute in the keyOrObj parameter...

Prototype Pollution in vConsole

vConsole was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

GHSA-F737-3FH6-JF6W Prototype Pollution in vConsole

vConsole was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

Design/Logic Flaw

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

Tencent vConsole 安全漏洞

Tencent vConsole is a lightweight, extensible front-end development tool for mobile web from Tencent, China. A security vulnerability exists in Tencent vConsole version 3.15.0, which stems from a prototype contamination issue due to incorrect key and value parsing in setOptions...

CVE-2023-30363

vConsole v3.15.0 has a prototype pollution flaw caused by incorrect key/value resolution in setOptions within core.ts. The issue is described as high-severity (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no exploitation details are provided in the included documents, and a concrete reme...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

CVE-2023-30363: Improperly Controlled Modification of Object Prototype Attributes

vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts...

PT-2023-22654 · Vconsole · Vconsole

Name of the Vulnerable Software and Affected Versions: vConsole version 3.15.0 Description: The issue is related to a prototype pollution in vConsole due to incorrect key and value resolution in the setOptions function in core.ts. This can potentially lead to security issues. Recommendations: For...

SUSE-SU-2023:0058-1 Security update for systemd

This update for systemd fixes the following issues: Fixing the following issues: - units: restore RemainAfterExit=yes in systemd-vconsole-setup.service - vconsole-setup: don't concat strv if we don't need to i.e. not in debug log mode - vconsole-setup: add more log messages - units: restore Befor...

SUSE: Security Advisory (SUSE-SU-2019:0137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for systemd (openSUSE-SU-2019:0098-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...