266 matches found
TOTOLINK T6 缓冲区错误漏洞
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00413be4 function not checking its length for input data. A remote attacker can exploi...
plymouthsantafunrun.co.uk Improper Access Control vulnerability OBB-2418841
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Uncontrolled Resource Consumption in fun-map
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
gossip-object (>=1.0.6, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (3.3.1)
fun-map NPM version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fun-map and may be impacted: - gossip-object =1.0.6, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: OSV:GHSA-P33M-7W7F-GMJ8...
GHSA-P33M-7W7F-GMJ8 Uncontrolled Resource Consumption in fun-map
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
h1-ctf: Solution for hackyholiday
Summary: Since there is a reward for the first 10 submissions, I'll start by providing the flags: flag48104912-28b0-494a-9995-a203d1e261e7 flagb7ebcb75-9100-4f91-8454-cfb9574459f7 flagb705fb11-fb55-442f-847f-0931be82ed9a flag972e7072-b1b6-4bf7-b825-a912d3fd38d6...
sun-fun-travel.de Cross Site Scripting vulnerability OBB-1434410
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-streaming.com Cross Site Scripting vulnerability OBB-1414136
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
maikashapers16.fun Cross Site Scripting vulnerability OBB-1383062
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-box.lv Cross Site Scripting vulnerability OBB-1344676
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-power.biz Cross Site Scripting vulnerability OBB-1248325
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DNF Pocket Android version of Chengdu I Fun Technology Co. Ltd. suffers from denial-of-service vulnerability
DNF Pocket Android is a Dungeons & Dragons game profile search application designed for Android users. There is a denial-of-service vulnerability in DNF Pocket Game Treasure Android version by Chengdu Me Fun Technology Co. An attacker can exploit the vulnerability to cause the program to crash...
fun-en-feest.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1155908 Security Researcher kun-fly Helped patch 790 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting fun-en-feest.nl website and...
Prototype Pollution
fun-map is vulnerable to prototype pollution. An attacker is able to inject and modify properties of Object.prototype using a proto payload in the function assocInM, potentially alowing the execution of arbitrary code...
Fun-map Resource Management Error Vulnerability
fun-map is a Clojure string mapping utility program. A security vulnerability exists in fun-map 3.3.1 and earlier versions. The vulnerability can be exploited to add or modify Object.prototype properties via the "assocInM" function...
CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
Design/Logic Flaw
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
CVE-2020-7644
CVE-2020-7644 affects fun-map up to version 3.3.1, with prototype pollution via the assocInM function that can add/modify Object.prototype properties using a proto payload. Reported across NVD and multiple feeds (Red Hat, GHSA, OSV, CNVD, CN...); CVSS scores indicate 6.8 (2.0/AV:N/AC:M) and 8.1 (...