Vendor
HackerOne
470 known vulnerabilities.
Products
RubyGems 4
hapi node module 4
sequelize node module 4
coffeescript node module 3
serve node module 2
html-janitor node module 2
ws node module 2
Nextcloud Server 2
i18next node module 2
marked node module 2
crud-file-server node module 2
private_address_check ruby gem 2
express-cart 2
nodemailer.js node module 2
remarkable node module 2
sanitize-html node module 2
m-server 2
http-live-simulator 1
lab6drewfusbyu node module 1
install-g-test node module 1
caolilinode node module 1
ibm_db node module 1
f2e-server node module 1
webrtc-native node module 1
lodash 1
desafio node module 1
phantomjs-cheniu node module 1
sencisho node module 1
hapi-auth-jwt2 node module 1
tinyserver2 node module 1
cobalt-cli node module 1
zwserver node module 1
selenium-portal node module 1
byucslabsix node module 1
react-native-baidu-voice-synthesizer node module 1
method-override node module 1
frames-compiler node module 1
npm-script-demo node module 1
jvminstall node module 1
sync-exec node module 1
1 result · Clear filters · Feed
-
Medium —CVE-2018-16492 Public exploit
Prototype Pollution in extend
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.