461 matches found
VetoProposal.voteToVeto() checks the proposal status wrongly.
Lines of code Vulnerability details Impact VetoProposal.voteToVeto wouldn't work as expected because voters can vote during the Voting status only. Proof of Concept When we check veto, it works during 3 statuses, Voting, Passed, Ready which is mentioned in the comment as well. ProposalStatus stat...
VetoProposal: proposals cannot be vetoed in all states in which it should be possible to veto proposals
Lines of code Vulnerability details Impact The VetoProposal contract allows to veto proposals with the voteToVeto function. The proposal can only be vetoed when it is in the Voting state, otherwise the voteToVeto function reverts. The issue is that the Voting state is not the only state in which ...
UBUNTU-CVE-2023-1075
A flaw was found in the Linux Kernel. The tlsistxready incorrectly checks for list emptiness, potentially accessing a type confused entry to the listhead, leaking the last byte of the confused field that overlaps with rec-txready...
GSD-2023-1002021 io_uring/poll: add hash if ready poll request can't complete inline
iouring/poll: add hash if ready poll request can't complete inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...
GSD-2023-1001730 io_uring/poll: add hash if ready poll request can't complete inline
iouring/poll: add hash if ready poll request can't complete inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...
Jettweb Ready Rent A Car Script 4 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Sipity SQL注入漏洞
Sipity is an open source plugin-ready and extensible Rails application from Hesburgh Libraries of Notre Dame. It is used to model approval-based workflows. Sipity suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to perform a sql injection attack...
dash-live 跨站脚本漏洞
dash-live is a library by Alex Ashley, a personal developer. Fake DASH Live profile endpoints using static assets. A cross-site scripting vulnerability exists in dash-live, which stems from a ready function in the static/js/media.js file of its DOM Node Handler component that allows an attacker t...
PT-2022-28049 · Unknown · Asrashley Dash-Live
Name of the Vulnerable Software and Affected Versions: asrashley dash-live affected versions not specified Description: A problematic vulnerability was found in the function ready of the file static/js/media.js of the component DOM Node Handler. This issue leads to cross-site scripting and can be...
AZL-11611 CVE-2022-3111 affecting package kernel for versions less than 5.15.86.1-1
An issue was discovered in the Linux kernel through 5.16-rc6. freechargerirq in drivers/power/supply/wm8350power.c lacks free of WM8350IRQCHGFASTRDY, which is registered in wm8350initcharger...
PT-2025-40124
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to the ASoC Audio Subsystem on Chip and mediatek mt8173 devices. Specifically, an interrupt request IRQ may be received before the system is...
October 11, 2022—KB5018454 (Monthly Rollup)
None None...
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service GameSDK.exe 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILESX86%\ASUS\GameSDK.exe file...
Code injection
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service GameSDK.exe 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILESX86%\ASUS\GameSDK.exe file...
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service GameSDK.exe 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILESX86%\ASUS\GameSDK.exe file...
CVE-2022-35899
CVE-2022-35899 affects ASUSTeK Aura Ready Game SDK service (GameSDK.exe) v1.0.0.4 with an unquoted service path, enabling local privilege escalation via overwriting the binary in Program Files (x86). Public exploits/documentation exist (e.g., Exploit-DB entry) and patch v1.0.5.0 is available; rem...
CVE-2022-35899: Unquoted Search Path or Element
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service GameSDK.exe 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILESX86%\ASUS\GameSDK.exe file...
PT-2022-23006 · Asustek · Asustek Aura Ready Game Sdk
Name of the Vulnerable Software and Affected Versions: ASUSTeK Aura Ready Game SDK service GameSDK.exe version 1.0.0.4 Description: The issue is related to an unquoted service path in the ASUSTeK Aura Ready Game SDK service. This might allow a local user to escalate privileges by creating a...
it.hiltoneventreadyplaybook.com Cross Site Scripting vulnerability OBB-2659332
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...