jackfromeast

`hexo g`可以正常生成，但是`hexo s`的启动的时候访问会报如下的错： ``` Unhandled rejection ReferenceError: ./MyBlog/themes/indigo-plus/layout/post.ejs:9 7| %> 8| >> 9| 10| 11| .//MyBlog/themes/indigo-plus/layout/_partial/post.ejs:17 15| 16| >> 17| 18| 19| 20| ./MyBlog/themes/indigo-plus/layout/_partial/post/copyright.ejs:6 4| 5| >> 6| 7| 8|...

vulnerable undefined property lookup that escalating prototype pollution to remote code execution

3

Hi there! I've identified several prototype pollution gadgets within the `node-blade` template engine that could potentially be leveraged by attackers to achieve remote code execution via prototype pollution vulnerabilities. **In...

Hi there! I've identified several prototype pollution gadgets within the `dustjs` template engine that could potentially be leveraged by attackers to achieve client-side cross-site scripting (XSS) through prototype pollution vulnerability....

Hello, I've identified several prototype pollution gadgets within the EJS template engine that could potentially be leveraged by attackers to achieve remote code execution via prototype pollution vulnerabilities. ## Root...

vulnerable undefined property lookup that escalating prototype pollution to remote code execution

1

Hello, I've identified another prototype pollution gadget within the doT template engine that could potentially be leveraged by attackers to achieve remote code execution via prototype pollution vulnerabilities. It is...

How to preload the desock.so when running arm binary with qemu?

3

Hi! I not sure if `preeny` can work well with other architectures for example `arm`. What I'm trying to do is to 'desocket' an arm-based binary by `preeny` and to...

vulnerable undefined property lookup that escalating prototype pollution to remote code execution

1

Hello, I've identified several prototype pollution gadgets within the `hamlet.js` template engine that could potentially be leveraged by attackers to achieve remote code execution via prototype pollution vulnerabilities. **In light...

Any example of how to implement the engine?

1

This is really cool work! Can I found any example of how to use the engine? Especially on how to input the taint source and taint sinks.

iframe tag with id attribute cannot clobber document.x

1

Here is a correction for the [paper](https://publications.cispa.saarland/3756/1/sp23_domclob.pdf) as well as the `domclob.xyz` website about the DOM Clobbering markups. Contrary to previous findings, `iframe` HTML element with `id=x` attribute cannot clobber...

Add prototype pollution gadgets in server-side template engines found by UoPF

1

Hi @yuske, I hope you're doing well! This repository is an excellent place to gather all the gadgets discovered by UoPF. Thank you so much for the fantastic work! Please...