PT-2022-19577

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the comment parameter in the function FUN 004196c8. This issue affects the TOTOLINK N600R router. Recommendations For TOTOLINK N600R version...

PT-2022-19575

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the apcliKey parameter in the function FUN 0041bac4. This issue affects the specified version of the TOTOLINK N600R router. Recommendations For...

PT-2022-19576

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the comment parameter in the FUN 00418f10 function. This issue allows for potential exploitation. Recommendations For TOTOLINK N600R version...

PT-2022-19578

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the File parameter in the function FUN 0041309c. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider restricting access...

PT-2022-19572

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered in the function FUN 00418c24, specifically via the comment parameter. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider...

PT-2022-19579

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the url parameter in the function FUN 00415bf0. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, as a temporary workaround,...

PT-2022-19574

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the macAddress parameter in the FUN 0041b448 function. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider restricting...

plymouthsantafunrun.co.uk Improper Access Control vulnerability OBB-2418841

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-P33M-7W7F-GMJ8 Uncontrolled Resource Consumption in fun-map

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

Uncontrolled Resource Consumption in fun-map

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

gossip-object (>=1.0.6, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (3.3.1)

fun-map NPM version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fun-map and may be impacted: - gossip-object =1.0.6, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: OSV:GHSA-P33M-7W7F-GMJ8...

PT-2021-5506

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 80040af8 function, located in the /formWlanSetup endpoint. This issue can be triggered via a crafted POST...

PT-2021-5204

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function FUN 80046eb4 in the /formSetPortTr endpoint. This vulnerability can be...

PT-2021-5503

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 8004776c function, located in the /formVirtualApp endpoint. This issue can be triggered via a crafted POST...

PT-2021-5505

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 800462c4 function, located in the /formAdvFirewall endpoint. This issue can be triggered via a crafted POST...

PT-2021-5582

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the function FUN 80034d60 in the /formStaticDHCP endpoint. This issue can be triggered via a crafted POST request,...

PT-2021-5507

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function FUN 8004776c, located in the /formVirtualServ endpoint. This vulnerability can be triggere...

h1-ctf: Solution for hackyholiday

Summary: Since there is a reward for the first 10 submissions, I'll start by providing the flags: flag48104912-28b0-494a-9995-a203d1e261e7 flagb7ebcb75-9100-4f91-8454-cfb9574459f7 flagb705fb11-fb55-442f-847f-0931be82ed9a flag972e7072-b1b6-4bf7-b825-a912d3fd38d6...

sun-fun-travel.de Cross Site Scripting vulnerability OBB-1434410

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fun-streaming.com Cross Site Scripting vulnerability OBB-1414136

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...