CVE-2023-0651

creationtimestamp| type| source ---|---|--- 2023-02-02 18:45:00+00:00| seen| https://t.me/cibsecurity/57407...

SubprotocolRegistry is vulnerable to malicious names

Lines of code Vulnerability details Impact A malicious subprotocol can register a name that looks the same as any other protocol. Users may use the malicious subprotocol because they can't distinguish the names, and be cheated out of subprotocolFee. Proof of Concept Any subprotocol can be...

Precision loss in the invariant function can lead to loss of funds

Lines of code Vulnerability details Impact An attacker can steal the funds without affecting the invariant. Proof of Concept We can say the function Pair.invariant is the heart of the protocol. All the malicious trades should be prevented by this function. Pair.sol 52: /// @inheritdoc IPair 53:...

CVE-2022-32527

creationtimestamp| type| source ---|---|--- 2023-01-31 02:50:40+00:00| seen| Telegram/8jHqDApyzkiakTukkubm0eFCsaL-neMh1d7evrx2hVA...

CVE-2022-42401

creationtimestamp| type| source ---|---|--- 2023-01-26 20:39:43+00:00| seen| https://t.me/cibsecurity/56917 2025-03-31 19:31:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9750...

Introducing Microservices Patterns with Spring Integration

Hey Spring Community! I hope you are enjoying Spring One Essentials these days. The most exciting feature for me is an Observability which is spread throughout the Spring portfolio from now on. Nevertheless, today I’d like to share with a project I’m working on since holidays, where the mentioned...

Chrome JSNativeContextSpecialization::BuildElementAccess Bypass

Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...

CVE-2023-0244

creationtimestamp| type| source ---|---|--- 2023-01-12 18:30:22+00:00| seen| https://t.me/cibsecurity/56422...

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.

...

CVE-2022-46603

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:13+00:00| seen| https://t.me/cibsecurity/56199...

CVE-2014-125059 sternenseemann sternenblog main.c blog_index file inclusion

A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blogindex of the file main.c. The manipulation of the argument postpath leads to file inclusion. The attack may be initiated remotely. The complexity of an attack is...

CVE-2022-47943

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...

GHSA-6MV3-WM7J-H4W5 Tauri Filesystem Scope Glob Pattern is too Permissive

Impact The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Example: The fs scope $HOME/.key would also allow $HOME/.ssh/secret.key to be read even though it is in a sub director...

CVE-2020-36624

creationtimestamp| type| source ---|---|--- 2022-12-22 12:23:28+00:00| seen| https://t.me/cibsecurity/55108...

CVE-2020-20588

creationtimestamp| type| source ---|---|--- 2022-12-15 22:23:35+00:00| seen| https://t.me/cibsecurity/54608 2025-04-21 20:03:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12755...

Pool calls to toScale can revert

Lines of code Vulnerability details Pool calls to toScale can revert Impact A division by 0 would revert the code. If wrongly assigned value in constructor to tokenAScale or tokenBScale, toScale calls would always revert. Proof of Concept constructor uint256 fee, uint256 tickSpacing, int32...

Downcast can lead to overflow and impact the functionality to remove an asset in NFTFloorOracle

Lines of code Vulnerability details Impact When adding a new asset, the index for the last asset will be saved and downcasted on L284. If the number of assets is bigger than 256, the downcasting operation will lead to a silent overflow. Consequentially, the incorrect index will be stored. This ca...

CVE-2022-42888

creationtimestamp| type| source ---|---|--- 2022-12-07 00:41:08+00:00| seen| https://t.me/cibsecurity/54106...

urijs: Authorization Bypass Through User-Controlled Key

A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch...

CVE-2022-43332

creationtimestamp| type| source ---|---|--- 2022-11-11 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7146 2022-11-18 02:18:14+00:00| seen| https://t.me/cibsecurity/53128 2025-04-29 15:11:32+00:00| published-proof-of-concept|...