234 matches found
fun-kidz.yooco.de Cross Site Scripting vulnerability OBB-3229043
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cross-site Scripting (XSS) - Stored
Description 1. https://11.x-dev.pimcore.fun/admin/ 2. Go to Settings - Thumbnails - Video Thumbnails 3. Click the button Add Media Segment 4. Write : " and then click ok...
SUSE CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...
PT-2023-9998 · Unknown · Drazraeltod Pychao
Name of the Vulnerable Software and Affected Versions: DrAzraelTod pyChao affected versions not specified Description: A critical issue was found in DrAzraelTod pyChao, affecting the function klauen/lesen of the file mod fun/ init .py. This issue leads to sql injection. Recommendations: At the...
TOTOLINK T6 缓冲区错误漏洞
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00413be4 function not checking its length for input data. A remote attacker can exploi...
plymouthsantafunrun.co.uk Improper Access Control vulnerability OBB-2418841
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Uncontrolled Resource Consumption in fun-map
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
GHSA-P33M-7W7F-GMJ8 Uncontrolled Resource Consumption in fun-map
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
gossip-object (>=0.1.0 <=2.3.4), gossipdb (>=0.1.1 <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (>=2.0.1 <=3.3.1)
fun-map NPM version =2.0.1, =0.1.0, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: OSV:GHSA-P33M-7W7F-GMJ8...
h1-ctf: Solution for hackyholiday
Summary: Since there is a reward for the first 10 submissions, I'll start by providing the flags: flag48104912-28b0-494a-9995-a203d1e261e7 flagb7ebcb75-9100-4f91-8454-cfb9574459f7 flagb705fb11-fb55-442f-847f-0931be82ed9a flag972e7072-b1b6-4bf7-b825-a912d3fd38d6...
sun-fun-travel.de Cross Site Scripting vulnerability OBB-1434410
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-streaming.com Cross Site Scripting vulnerability OBB-1414136
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
maikashapers16.fun Cross Site Scripting vulnerability OBB-1383062
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-box.lv Cross Site Scripting vulnerability OBB-1344676
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fun-power.biz Cross Site Scripting vulnerability OBB-1248325
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DNF Pocket Android version of Chengdu I Fun Technology Co. Ltd. suffers from denial-of-service vulnerability
DNF Pocket Android is a Dungeons & Dragons game profile search application designed for Android users. There is a denial-of-service vulnerability in DNF Pocket Game Treasure Android version by Chengdu Me Fun Technology Co. An attacker can exploit the vulnerability to cause the program to crash...
fun-en-feest.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1155908 Security Researcher kun-fly Helped patch 790 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting fun-en-feest.nl website and...
Prototype Pollution
fun-map is vulnerable to prototype pollution. An attacker is able to inject and modify properties of Object.prototype using a proto payload in the function assocInM, potentially alowing the execution of arbitrary code...
Fun-map Resource Management Error Vulnerability
fun-map is a Clojure string mapping utility program. A security vulnerability exists in fun-map 3.3.1 and earlier versions. The vulnerability can be exploited to add or modify Object.prototype properties via the "assocInM" function...