CVE-2025-57351

A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keys in the assign function allows attackers to manipulate the Object.prototype chain. By leveraging this flaw, adversaries may inject arbitrary properties int...

PT-2025-39324

Name of the Vulnerable Software and Affected Versions ts-fns versions prior to 13.0.7 Description A prototype pollution issue exists due to inadequate validation of user-supplied keys within the assign function. This allows manipulation of the Object.prototype chain. Attackers can inject arbitrar...

MAL-2025-6086 Malicious code in date-fns-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 198e596cb2c2121aa77f2e09818cef26a8bf79c7718c8d4d136f7eae01a0d0f3 Any computer that has this package installed or running should be considered...

Malicious code in date-fns-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 198e596cb2c2121aa77f2e09818cef26a8bf79c7718c8d4d136f7eae01a0d0f3 Any computer that has this package installed or running should be considered...

CVE-2024-49329

Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through = 1.0.0...

CVE-2024-49329

Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through = 1.0.0...

CVE-2024-49329

CVE-2024-49329 concerns the WP REST API FNS WordPress plugin (versions

CVE-2024-49329 WordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through = 1.0.0...

CVE-2024-49328 WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Vivek Tamrakar WP REST API FNS allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through 1.0.0...

CVE-2024-49328 WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through = 1.0.0...

CVE-2024-49328

CVE-2024-49328 is an authentication bypass vulnerability in the WP REST API FNS WordPress plugin, enabling account takeover. The issue affects WP REST API FNS versions from 1.0.0 and earlier, and is described consistently across sources (NVD, CVE, Red Hat). Connected documents corroborate: the vu...

WordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP REST API FNS versions = 1.0.0...

WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP REST API FNS versions = 1.0.0...

WordPress WP REST API FNS Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software WP REST API FNS Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-49328 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID b5035012904a Credits stealthcopter Required privilege...

Malicious code in llama-fns (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2627 Malicious code in llama-fns (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1363 Malicious code in input-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97cebe2b3c5f99612c7086d455844599d1f9afef3e76c1c74b54de73ad1ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

fns-prod.azureedge.us Cross Site Scripting vulnerability OBB-3346551

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fns-prod.azureedge.us Cross Site Scripting vulnerability OBB-3175031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fns-prod.azureedge.net Cross Site Scripting vulnerability OBB-2418272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...