154 matches found
EUVD-2020-29682
Malware in sbrugna...
EUVD-2022-39019
Malicious code in bioql PyPI...
EUVD-2022-39018
Malicious code in bioql PyPI...
Malicious code in bf-crc (npm)
The package bf-crc was found to contain malicious code...
MAL-2025-15629 Malicious code in bf-crc (npm)
The package bf-crc was found to contain malicious code...
CVE-2025-8128
A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de48f7fbe98. This issue affects some unknown processing of the file routes\bf\product.js. The manipulation of the argument pictrdtz leads to unrestricted upload. The attack may be...
CVE-2025-8128: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de48f7fbe98. This issue affects some unknown processing of the file routes\bf\product.js. The manipulation of the argument pictrdtz leads to unrestricted upload. The attack may be...
CVE-2020-8839
Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...
CVE-2010-2255
SQL injection vulnerability in the BF Survey Pro combfsurveypro component before 1.3.1, BF Survey Pro Free combfsurveyprofree component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE:...
CVE-2022-36301
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password...
CVE-2022-36302
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information...
SUSE CVE-2024-48241
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the bfdiv function...
PT-2024-33052
Name of the Vulnerable Software and Affected Versions radare2 versions 5.8.0 through 5.9.4 Description The issue allows a local attacker to cause a denial of service via the bf div function. Recommendations For radare2 versions 5.8.0 through 5.9.4, consider disabling the bf div function as a...
VulnCheck KEV: CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...
org.objectweb.fractal.bf.connectors:fractal-bf-connectors-soap-cxf (0.3) potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.0.7)
org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.objectweb.fractal.bf.connectors:fractal-bf-connectors-soap-cxf 0.3 Source cve...
bf-transactions.fr Cross Site Scripting vulnerability OBB-3873064
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in yoga-layout-bf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9b59bfda9900fe733c84e49fb2751b2e66ecd904895deedb4b591f80be5685d The OpenSSF Package Analysis project identified 'yoga-layout-bf' @ 2.1.0 npm as malicious. It is considered malicious because: - The package...
bf-capital.de Improper Access Control vulnerability OBB-3772402
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-36302
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information...