51 matches found
MAL-2025-5199 Malicious code in postcss-color-fn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1cd24ceaf86cd4c6ea692394931ef883d797f87e012ff4ccb60afc7fb8fa5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in postcss-color-fn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1cd24ceaf86cd4c6ea692394931ef883d797f87e012ff4ccb60afc7fb8fa5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sally-fn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8f992872ff1926200839cd344c09dfc137f063e5f7e5f87f54d62b1d758202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1496 Malicious code in sally-fn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8f992872ff1926200839cd344c09dfc137f063e5f7e5f87f54d62b1d758202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Spring Framework Path Traversal vulnerability
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...
CVE-2024-52754
D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the tgfilehtm function...
CVE-2024-52754
CVE-2024-52754 affects D-LINK DI-8003 (firmware 16.07.16A1). A buffer overflow in the tgfile_htm function is triggered via the fn parameter. Public references corroborate the issue; impact is noted as availability-related. A temporary workaround from PTSecurity recommends restricting access to th...
PT-2024-8580 · D Link · D-Link Di-8003
Name of the Vulnerable Software and Affected Versions: D-LINK DI-8003 version 16.07.16A1 Description: A buffer overflow issue was discovered in the tgfile htm function, related to the fn parameter. This could allow a remote attacker to impact the confidentiality, integrity, and availability of...
PT-2024-25942
Name of the Vulnerable Software and Affected Versions Gradio versions prior to 4.13 Description The issue arises from the Component Server in Gradio not properly considering is server fn for functions. This can lead to security risks if function calls do not take is server fn into account...
CVE-2023-45572
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...
CVE-2023-45574
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...
PT-2023-6459 · D Link · Di-7200Gv2 +4
Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 versions 23.08.25D1 and before D-Link DI-7100G+V2 versions 23.08.23D1 and before D-Link DI-7100GV2 version 23.08.23D1 D-Link DI-7200G+V2 versions 23.08.23D1 and before D-Link DI-7200GV2 versions 23.08.23E1 and before D-Link...
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system is related to the issue where operations are performed outside the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to compromise the...
D-Link Di-7200G Buffer Error Vulnerability
The D-Link Di-7200G is a Gigabit enterprise router from China's AUO D-Link. A security vulnerability exists in the D-Link Di-7200G, which can be caused by manipulating the fn parameter in the tgfile.asp function to cause a stack overflow...
fn-consulting.at Cross Site Scripting vulnerability OBB-3693741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
RUSTSEC-2021-0005 Double drop upon panic in 'fn map_array()'
Affected versions of this crate did not guard against panic within the user-provided function f 2nd parameter of fn maparray, and thus panic within f causes double drop of a single object. The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within...
Authentication Bypass
php-horde-gollem is vulnerable to authentication bypass. The File Manager gollem module allows remote attackers to bypass Horde authentication for file downloads via a malicious fn parameter that corresponds to the exact filename...
fn-kleinanzeigen.de Cross Site Scripting vulnerability OBB-1298802
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-6120
SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
fn-landom.com.au Cross Site Scripting vulnerability OBB-1208377
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...