2762 matches found
PT-2020-22371
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow read 2. The crash state involves a function related to...
PT-2020-22492
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 2. The crash state involves several function calls,...
PT-2020-22366
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves a complex data structure, including hb hashmap t and hb...
Denial of Service Vulnerability in WR740N of China P&L Technology Co.
China P&T is a leading global provider of network communication equipment. A denial-of-service vulnerability exists in the WR740N of China P&L Technology Limited, which can be exploited by attackers to cause a denial of service on the system...
PT-2020-22386
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a problem in the hb serialize context t::embed function, specifically when...
PT-2020-21986
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, as indicated by an OSS-Fuzz report. The crash state suggests the issue occurs in the hb array t and...
PT-2020-21989
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as hb array t ::copy and...
t-sh-e.com Cross Site Scripting vulnerability OBB-1202837
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14199
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the...
CVE-2020-14199
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the...
CVE-2020-14199
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the...
CVE-2020-14199: Improper Verification of Cryptographic Signature
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the...
PT-2020-13926
Name of the Vulnerable Software and Affected Versions: Trezor One versions prior to 1.9.1 Trezor Model T versions prior to 2.3.1 Description: The issue in the Bitcoin protocol specification, specifically BIP-143, mishandles the signing of a Segwit transaction. This allows attackers to trick a use...
t-shirt-publicitaire.pro Cross Site Scripting vulnerability OBB-1192306
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
t-times.ro Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186097 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the IIOP and T3 network protocols...
t-arata.info Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1171605 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Logic Flaw Vulnerability in T-Swap-Token
T-Swap-Token T-S-T is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in T-S-T's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...
Time for Reflection and Thanks
Most of the programs I ran used calendar years for project planning, budgets, etc. I always found November to be a good time to reflect on the progress made, plan for the next year, and give thanks for all the positive steps in the right direction. In general, I followed the SWOTT method for...
CVE-2018-21058
An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...