154 matches found
wordpress-bf
wordpress-bf This is a tool to enumerate the authors of a wordpress blog website and try bruteforce the logins. Its not complete but it does work. If you spot any horiffic code please submit a PR to fix it! It will write the url and and user and password to a text file called found.txt It will...
Astra Linux – Vulnerability in Chromium
Before version 91.0.4472.101, using BFCache in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
banana-cli (0.0.1), banana-server (0.0.1) +31 more potentially affected by CVE-2026-85078 via sanic (21.12.2)
sanic PYPI version 21.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - banana-cli 0.0.1 - banana-server 0.0.1 - bf-nlu =1.1.0, =1.1.0, =0.0.3, =0.0.1, =0.0.5, =0.0.1, =0.2.5, =0.1.0, =0.1.2, =0.1.0, =0.0.1, =0.2.0,...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in BFCache in Google Chrome prior to version 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...
CVE-2026-17735
An insufficient validation of untrusted input flaw was found in the BFCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496569497...
CVE-2026-17735
Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CHIYU TCP/IP Converter - Carriage Return Line Feed Injection Detection
CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +34 more potentially affected by CVE-2026-37737 via sanic-cors (>=2.0.0, <=2.2.0)
sanic-cors PYPI version =2.0.0, =1.1.0, =1.1.0, =0.0.3, =0.0.1, =1.0.1, =0.0.5, =0.0.1, =0.1.4, =0.0.1, =0.0.1, =0.0.47, =0.10.24 and more Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...
arbor-ai (0.2.17), ardupilot-methodic-configurator (>=1.4.3, <=1.4.4) +8 more potentially affected by CVE-2026-59890 via setuptools (79.0.0)
setuptools PYPI version 79.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - arbor-ai 0.2.17 - ardupilot-methodic-configurator =1.4.3, =0.0.1, =1.0.6, =0.1.0, =20250422.0.0.dev0, =20250430.0.0.dev0 -...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +34 more potentially affected by CVE-2026-37737 via sanic-cors (>=2.0.0, <=2.2.0)
sanic-cors PYPI version =2.0.0, =1.1.0, =1.1.0, =0.0.3, =0.0.1, =1.0.1, =0.0.5, =0.0.1, =0.1.4, =0.0.1, =0.0.1, =0.0.47, =0.10.24 and more Source cves: CVE-2026-37737 Source advisory: GHSA-94JW-HQVJ-VW74...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013504)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013504 advisory. In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bfqexiticqbfqq Commit 64dc8c732f5c block, bfq: fix possible uaf f...
CVE-2021-31642
A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer 32 bits on the page parameter that will crash the web portal...
EUVD-2025-38432
Malicious code in bf-purchases-frontend-web npm...
MAL-2025-49398 Malicious code in bf-purchases-frontend-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd380729ba06ecc83dd6bb54612311d4c2b15fc0b2eed47205416bf280f879 The package bf-purchases-frontend-web was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in bf-purchases-frontend-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd380729ba06ecc83dd6bb54612311d4c2b15fc0b2eed47205416bf280f879 The package bf-purchases-frontend-web was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2020-29682
Malware in sbrugna...
EUVD-2010-2271
Malware in sbrugna...
EUVD-2010-2267
Malware in sbrugna...