Lucene search
+L

12 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-4645

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.03012EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:44 a.m.•17 views

SUSE CVE-2017-9785

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS7.5AI score0.03012EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2022/05/17 2:26 a.m.•49 views

GHSA-MX3Q-J2G2-5QXQ Deserialization of Untrusted Data in NancyFX Nancy

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS9.7AI score0.03012EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/17 2:26 a.m.•79 views

Deserialization of Untrusted Data in NancyFX Nancy

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS5AI score0.03012EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2017/07/25 12:00 a.m.•17 views

NancyFX Nancy Remote Code Execution Vulnerability

NancyFX Nancy is a lightweight framework . The framework is used to build HTTP services on the .NET Framework or .NET Core. A security vulnerability exists in the Csrf.cs file in NancyFX Nancy versions prior to 1.4.4 and 2.x versions prior to 2.0-dangermouse. A remote attacker can exploit this...

9.8CVSS7.4AI score0.03012EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/07/20 12:29 p.m.•33 views

CVE-2017-9785

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS7.9AI score
SaveExploits0References1
NVD
NVD
•added 2017/07/20 12:29 p.m.•27 views

CVE-2017-9785

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS9.8AI score0.03012EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/20 12:29 p.m.•30 views

Deserialization of untrusted data

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

7.5CVSS7.8AI score0.03012EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2017/07/20 12:00 p.m.•5 views

CVE-2017-9785

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS0.03012EPSS
SaveExploits0References2
CVE
CVE
•added 2017/07/20 12:00 p.m.•142 views

CVE-2017-9785

CVE-2017-9785 affects NancyFX Nancy (Csrf.cs) prior to 1.4.4 and 2.x prior to 2.0-dangermouse. It enables Remote Code Execution through deserialization of JSON data in a CSRF cookie. Root cause: unsafe deserialization in cookie handling. Impact: RCE with network access; high severity. Remediation...

9.8CVSS9.6AI score0.03012EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2017/07/20 12:00 a.m.•6 views

PT-2017-19186

Name of the Vulnerable Software and Affected Versions NancyFX Nancy versions prior to 1.4.4 NancyFX Nancy versions 2.x prior to 2.0-dangermouse Description The issue allows for Remote Code Execution via Deserialization of JSON data in a CSRF Cookie, specifically affecting the Csrf.cs component...

9.8CVSS0.03012EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/20 12:00 a.m.•9 views

CVE-2017-9785: Deserialization of Untrusted Data

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

9.8CVSS5.8AI score0.03012EPSS
SaveExploits0References2
Rows per page
Query Builder