136 matches found
StimulusReflex arbitrary method call
Summary More methods than expected can be called on reflex instances. Being able to call some of them has security implications. Details To invoke a reflex a websocket message of the following shape is sent: json "target": "classnamemethodname", "args": The server will proceed to instantiate refl...
GHSA-2JV5-9R88-3W3P vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-2JV5-9R88-3W3P vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-QF9M-VFGH-M389 vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-QF9M-VFGH-M389 vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-93GM-QMQ6-W238 vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-93GM-QMQ6-W238 vulnerabilities
Vulnerabilities for packages: reflex...
CVE-2024-24762 vulnerabilities
Vulnerabilities for packages: reflex...
CVE-2024-24762 vulnerabilities
Vulnerabilities for packages: reflex...
GHSA-H5C8-RQWP-CP95 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, checkov, reflex, py3-jinja2...
CVE-2024-22195 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, checkov, py3-jinja2, reflex...
CVE-2024-22195 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, checkov, reflex, py3-jinja2...
reflex.cnrs.fr Cross Site Scripting vulnerability OBB-3436343
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-35954
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...
CVE-2021-35952
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017...
CVE-2021-35953
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to cause a Denial of Service device outage via crafted choices of the last three bytes of a characteristic value...
CVE-2021-35953
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to cause a Denial of Service device outage via crafted choices of the last three bytes of a characteristic value...
CVE-2021-35952
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017...