maikashapers16.fun Cross Site Scripting vulnerability OBB-1383062

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fun-box.lv Cross Site Scripting vulnerability OBB-1344676

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fun-power.biz Cross Site Scripting vulnerability OBB-1248325

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

DNF Pocket Android version of Chengdu I Fun Technology Co. Ltd. suffers from denial-of-service vulnerability

DNF Pocket Android is a Dungeons & Dragons game profile search application designed for Android users. There is a denial-of-service vulnerability in DNF Pocket Game Treasure Android version by Chengdu Me Fun Technology Co. An attacker can exploit the vulnerability to cause the program to crash...

fun-en-feest.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155908 Security Researcher kun-fly Helped patch 790 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting fun-en-feest.nl website and...

Prototype Pollution

fun-map is vulnerable to prototype pollution. An attacker is able to inject and modify properties of Object.prototype using a proto payload in the function assocInM, potentially alowing the execution of arbitrary code...

Fun-map Resource Management Error Vulnerability

fun-map is a Clojure string mapping utility program. A security vulnerability exists in fun-map 3.3.1 and earlier versions. The vulnerability can be exploited to add or modify Object.prototype properties via the "assocInM" function...

CVE-2020-7644

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

CVE-2020-7644

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

Design/Logic Flaw

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

CVE-2020-7644

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

CVE-2020-7644

CVE-2020-7644 affects fun-map up to version 3.3.1, with prototype pollution via the assocInM function that can add/modify Object.prototype properties using a proto payload. Reported across NVD and multiple feeds (Red Hat, GHSA, OSV, CNVD, CN...); CVSS scores indicate 6.8 (2.0/AV:N/AC:M) and 8.1 (...

CVE-2020-7644

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

PT-2020-19679 · Fun-Map · Fun-Map

Name of the Vulnerable Software and Affected Versions: fun-map versions 3.3.1 and earlier Description: The issue concerns Prototype Pollution, where the assocInM function can be tricked into adding or modifying properties of Object.prototype using a proto payload. This allows for potential...

CVE-2020-7644: Improperly Controlled Modification of Object Prototype Attributes

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

Arbitrary Code Execution

Overview fun-map is a functional utilities for pretending that JS objects are Clojure string maps. Affected versions of this package are vulnerable to Arbitrary Code Execution. The injection point is located in line 26 in the index file class.js; the members argument of the create function can be...

gossip-object (>=0.1.0, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7640 via fun-map (>=2.0.1, <=3.3.1)

fun-map NPM version =2.0.1, =0.1.0, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7640 Source advisory: SNYK:JS-FUNMAP-564436...

Inside the Hidden World of Elevator Phone Phreaking

Eavesdropping, reprogramming, talking to strangers: Welcome to the harmless and not-so-harmless fun of hacking elevator call boxes...

Don’t Get Your Valentine an Internet-Connected Sex Toy

Mozilla expands its “Privacy Not Included” gift guide to the bedroom: It’s all sexy fun and games until someone hacks a WiFi-enabled butt plug...

jav8.fun XSS vulnerability

Open Bug Bounty ID: OBB-637823 Description| Value ---|--- Affected Website:| jav8.fun Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...