Remote Code Execution via Prototype Pollution in Blitz.js
Target Program: Blitz.js
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by VuusaleBrand-new prototype pollution gadget in MongoDB leading to RCE
pentester.land
by Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru StaicuSilent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
pentester.land
by Hossein Lotfi (@hosselot), Manfred Paul (@_manfp)But You Told Me You Were Safe: Attacking The Mozilla Firefox Renderer (Part 1)
pentester.land
by Song Li, Mingqing Kang, Jianwei Hou, Yinzhi Cao