{"vulnerability": "cve-2020-7788", "sightings": [{"uuid": "1f79cf0e-ccc1-4c8c-89fd-081ff6ba7653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20217", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T18:31:27.000000Z"}, {"uuid": "a7c47127-b23a-48b3-86fc-931221255b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20236", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T18:34:27.000000Z"}, {"uuid": "ad45aa72-e074-4595-a0a9-cf2e37134ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20101", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T16:35:34.000000Z"}, {"uuid": "e9d326be-0ae9-4cb5-ba01-7cb9c6fda51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20121", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T17:25:31.000000Z"}, {"uuid": "9ce8ef10-aaa1-492a-86b0-f1bf486d1aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20197", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T18:25:21.000000Z"}, {"uuid": "f109dac0-327a-4e5c-87d9-328b6316ff68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/19985", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T14:35:28.000000Z"}, {"uuid": "d7a6db9d-23a9-4448-a13f-c8dd93ac5bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20083", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T16:25:34.000000Z"}, {"uuid": "7ec4b6b5-1656-4736-9bff-b13487d8ea2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20063", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T16:24:26.000000Z"}, {"uuid": "841dd3e3-ccf0-4287-aa15-c696468c220d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20177", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T18:24:25.000000Z"}, {"uuid": "b663f33a-5faa-4d0b-9c25-8aadc5d8e0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20044", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T16:16:05.000000Z"}, {"uuid": "3ffe46f6-87c4-4e3e-be8f-17db7b22ef1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20025", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T15:25:27.000000Z"}, {"uuid": "6d1fec52-dac6-42c5-ac2b-ce9923500066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20159", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T18:11:14.000000Z"}, {"uuid": "af99f5aa-7cca-4cd1-aa55-093759741559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://t.me/cibsecurity/20005", "content": "\u203c CVE-2020-7788 \u203c\n\nThis affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T14:41:42.000000Z"}, {"uuid": "fc7bba2f-ec88-474e-b692-d0cc27a1f9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-7788", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqgx-2p2h-9c37", "content": "", "creation_timestamp": "2020-12-10T16:53:45.000000Z"}, {"uuid": "d19649e9-324a-47ce-aaf3-3a14e64e2bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7788", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mum6vp2gg72t", "content": "CVE-2020-7788 - ini\nThe ini package before version 1.3.6 can be exploited by an attacker submitting a malicious INI file, potentially allowing them to compromise the application's security. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ini #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-09-03T10:00:05.897916Z"}]}