PT-2022-28336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

PT-2022-28348

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

Convenience contract fails to function if asset or collateral is an ERC20 token with fees

Handle Ruhum Vulnerability details Impact There are ERC20 tokens that collect fees with each transfer. If the asset or collateral used in a pair is of that type, the Convenience contract fails to function. It always sends the flat amount specified in the function's parameter. If the token collect...

Apache Log4Shell RCE detection via callback correlation (Direct Check RPCBIND)

Binary data log4jlog4shellrpcbind.nbin...

pay() function has callback to msg.sender before important state updates

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the pay function has a callback to the msg.sender in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function...

Important state updates are made after the callback in the mint() function

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the mint function has a callback in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function reentrancy. Since...

In the lend() function state updates are made after the callback

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the lend function has a callback to the msg.sender in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function...

Apache Log4Shell RCE detection via callback correlation (Direct Check PPTP)

Binary data log4jlog4shellpptp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check UPnP)

Binary data apachelog4shellupnp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check DNS)

Binary data apachelog4shelldns.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check NTP)

Binary data log4jlog4shellntp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SNMP)

Binary data apachelog4shellsnmp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SMB)

Binary data log4jlog4shellsmb.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check NetBIOS)

Binary data apachelog4shellnetbios.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check Telnet)

Binary data apachelog4jjdnildapgenerictelnet.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SSH)

Binary data apachelog4shellssh.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check IMAP)

Binary data apachelog4shellimap.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check POP3)

Binary data apachelog4shellpop3.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)

Binary data apachelog4shellsmtp.nbin...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in void pcl::PLYReader::vertexListPropertyContentCallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5756458652794880 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x61500569fe8c Crash State: void...