🎯 Prototype Pollution

The items that name it 10

• From JavaScript to Renderer Code Execution: Three V8 Vulnerabilities and Two v8CTF Flags | depthfirst
  writeupas techniques2026-10-20It is written here as Prototype pollution (Promise.prototype.then override).

  Replacing Promise.prototype.then lets the attacker control the return value propagated by the internal Promise helper, turning the type confusion into a Smi-as-pointer primitive

• Your CVE is reachable. But is it exploitable?
  articleas classification.key entities2026-10-17
• Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser | Blog | Endor Labs
  writeupas classification.key entities2026-10-12
• ICYMI: August 2026 @AWS Security
  articleas techniques2026-09-23

  remote code execution vector in OpenSearch

• BountyForge
  repoas techniques2026-07-22

  Payload coverage

• Socket: pnpm 11.10 Hardens Registry Authentication to Block Token Redirection
  articleas techniques2026-07-16

  A prototype pollution hazard tied to a dependency named __proto__ was fixed in pnpm 11.10

• Strix
  repoas techniques2026-07-15

  Client-side attack tested by Strix

• JFrog: Where CVE Severity Scores Go Wrong
  writeupas techniques2026-07-01

  Attacker modifies properties on JavaScript's Object.prototype, causing attacker-controlled values to be inherited by objects throughout an application, potentially leading to denial-of-service, XSS, privilege escalation, or remote code execution depending on downstream usage.

• Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
  writeupas techniques2026-06-29

  High-signal exploit shape often found cleanly by model configurations.

• RAPTOR
  repoas techniques2026-06-28

  Covered by Semgrep rules