9 matches found
EUVD-2022-4645
Malicious code in bioql PyPI...
SUSE CVE-2017-9785
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
GHSA-MX3Q-J2G2-5QXQ Deserialization of Untrusted Data in NancyFX Nancy
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
Deserialization of Untrusted Data in NancyFX Nancy
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
NancyFX Nancy Remote Code Execution Vulnerability
NancyFX Nancy is a lightweight framework . The framework is used to build HTTP services on the .NET Framework or .NET Core. A security vulnerability exists in the Csrf.cs file in NancyFX Nancy versions prior to 1.4.4 and 2.x versions prior to 2.0-dangermouse. A remote attacker can exploit this...
CVE-2017-9785
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
Deserialization of untrusted data
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
CVE-2017-9785
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...
CVE-2017-9785
CVE-2017-9785 affects NancyFX Nancy (Csrf.cs) prior to 1.4.4 and 2.x prior to 2.0-dangermouse. It enables Remote Code Execution through deserialization of JSON data in a CSRF cookie. Root cause: unsafe deserialization in cookie handling. Impact: RCE with network access; high severity. Remediation...