certfuzz

This project contains the source code for the CERT Basic Fuzzing Framework BFF BFF for Windows was formerly known as the CERT Failure Observation Engine FOE. If you are looking for runnable code, you should download the latest releases at: BFF Using this code Depending on your preferred level of...

CVE-2026-86332 Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...

CVE-2026-86332

A flaw in the odh-dashboard component of Red Hat OpenShift AI allows any authenticated dashboard user to read Kubernetes Secrets without an authorization check. The backend-for-frontend route GET /api/nim-serving/:nimResource uses the dashboard service account to retrieve and return the full Secr...

@angular-devkit/build-angular (22.1.0-next.0), @oslokommune/auth-bff (>=2.0.1, <=2.2.1) +1 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=4.0.0, <=4.1.0)

http-proxy-middleware NPM version =4.0.0, =2.0.1, =8.6.0, =8.8.3 Source cves: CVE-2026-55603 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-17375007...

@angular-devkit/build-angular (22.1.0-next.0), @oslokommune/auth-bff (>=2.0.1, <=2.2.1) +1 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=4.0.0, <=4.1.0)

http-proxy-middleware NPM version =4.0.0, =2.0.1, =8.6.0, =8.8.3 Source cves: CVE-2026-55603 Source advisory: OSV:GHSA-GCQ2-9PQ2-CXQM...

@angular-devkit/build-angular (22.1.0-next.0), @oslokommune/auth-bff (>=2.0.1, <=2.2.1) +1 more potentially affected by CVE-2026-55602 via http-proxy-middleware (4.0.0)

http-proxy-middleware NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-middleware and may be impacted: - @angular-devkit/build-angular 22.1.0-next.0 - @oslokommune/auth-bff =2.0.1, =8.6.0, =8.7.1 Source cves: CVE-2026-55602...

Malicious code in @subscription-info/bff (npm)

The package @subscription-info/bff was found to contain malicious code...

Malicious code in app-bff-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655a2f4df6d902859d804242c3a98e97bd5bcb325bc1583b5c549d376234d219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3871 Malicious code in app-bff-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655a2f4df6d902859d804242c3a98e97bd5bcb325bc1583b5c549d376234d219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11036 Malicious code in eslint-plugin-mkt-bff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a8225040f68ab161450053e03e7daf7d2184c9a50e5e727ae3ed5b2bcef2088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sfcc-bff/productapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346fb452731fddd9d8d42def5849cb9522eb06763f6e285425bac601198b66f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-582 Malicious code in @sfcc-bff/productapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346fb452731fddd9d8d42def5849cb9522eb06763f6e285425bac601198b66f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BFF High School Fashion 2 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF High School Fashion 2 published at the 'play' market has multiple vulnerabilities...

Winter Vacation - BFF Dress Up - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Winter Vacation - BFF Dress Up published at the 'play' market has multiple vulnerabilities...

BFF Salon - Tea Room Party - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF Salon - Tea Room Party published at the 'play' market has multiple vulnerabilities...

BFF Downtown Date: Beauty Mall - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF Downtown Date: Beauty Mall published at the 'play' market has multiple vulnerabilities...