No Allowlist For Bridgeable ERC-20 Tokens

Lines of code Vulnerability details Vulnerability Details We noticed that the deposit function of the L1ERC20Bridge contract code snippet 1 permits a user to bridge any ERC-20 tokens including deflationary and rebase tokens from the L1 to the L2 network. We considered that permitting non-standard...

Last Years Open Source - Tomorrow's Vulnerabilities

Linus Torvalds, the creator of Linux and Git, has his own law in software development, and it goes like this: "given enough eyeballs, all bugs are shallow." This phrase puts the finger on the very principle of open source: the more, the merrier - if the code is easily available for anyone and...

CVE-2022-3395

creationtimestamp| type| source ---|---|--- 2022-10-25 20:26:51+00:00| seen| https://t.me/cibsecurity/52022 2025-05-07 20:23:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15419...

CVE-2022-40084

creationtimestamp| type| source ---|---|--- 2022-10-20 18:21:17+00:00| seen| https://t.me/cibsecurity/51887...

CVE-2022-26954

creationtimestamp| type| source ---|---|--- 2022-10-20 14:21:16+00:00| seen| https://t.me/cibsecurity/51865 2025-05-08 18:24:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15576...

CVE-2022-31684

creationtimestamp| type| source ---|---|--- 2022-10-20 02:20:49+00:00| seen| https://t.me/cibsecurity/51848...

CVE-2022-38107

creationtimestamp| type| source ---|---|--- 2022-10-20 02:20:40+00:00| seen| https://t.me/cibsecurity/51842...

CVE-2018-19052

creationtimestamp| type| source ---|---|--- 2022-10-20 01:22:59+00:00| seen| https://t.me/isendpackets/129 2024-01-07 02:41:34+00:00| seen| https://t.me/arpsyndicate/2605...

CVE-2020-15338

creationtimestamp| type| source ---|---|--- 2022-10-15 00:29:20+00:00| seen| https://t.me/cibsecurity/50649...

AZL-66915 CVE-2022-32149 affecting package cni for versions less than 1.0.1-20

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-33575 CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

CVE-2022-41385

creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:12+00:00| seen| https://t.me/cibsecurity/51224 2025-05-20 14:40:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16978...

CVE-2022-41975

creationtimestamp| type| source ---|---|--- 2022-09-30 22:36:25+00:00| seen| https://t.me/cibsecurity/50796 2025-05-20 16:41:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17016...

CVE-2022-32540

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:21+00:00| seen| https://t.me/cibsecurity/50782 2025-05-20 16:40:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17002...

CVE-2022-3352

creationtimestamp| type| source ---|---|--- 2022-09-29 16:35:02+00:00| seen| https://t.me/cibsecurity/50726 2025-05-20 20:41:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17087...

CVE-2022-3326

creationtimestamp| type| source ---|---|--- 2022-09-29 07:41:10+00:00| seen| https://t.me/cibsecurity/50660 2025-05-20 20:41:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17083...

CVE-2022-40707

creationtimestamp| type| source ---|---|--- 2022-09-29 00:34:35+00:00| seen| https://t.me/cibsecurity/50630 2022-09-29 00:34:38+00:00| seen| https://t.me/cibsecurity/50634 2022-09-29 00:34:47+00:00| seen| https://t.me/cibsecurity/50639 2025-05-20 20:41:12+00:00| seen|...

CVE-2022-34394

creationtimestamp| type| source ---|---|--- 2022-09-29 00:34:34+00:00| seen| https://t.me/cibsecurity/50629 2025-05-20 20:41:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17076...

CVE-2022-40710

A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2022-40708

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o...